DevSecOps Engineer

Responsibilities • Develop automation and processes to enable application teams to deploy, manage, scale and monitor their applications on the case management application platform (built on OutSystems) • Take ownership of platform-level solutions, and coordinate with the infrastructure team on hosting, network and infrastructure issues • Manage platform configuration, including user and role management, access control, integration endpoints (e.g. APIs, SSO) and platform settings • Own the CI/CD pipelines and release management process for applications hosted on the case management platform, including deployment plans, versioning and rollback, and approve production release readiness • Implement platform and application observability (metrics, logs, traces) with defined SLIs/SLOs, dashboards and alert tuning, and report availability and performance against service levels • Deploy and manage platform and application monitoring for performance, availability, errors and usage, and identify bottlenecks to maximise service availability • Conduct performance and load testing, capacity planning and performance tuning with application teams to keep the case management platform responsive under enterprise workloads • Lead system troubleshooting and problem solving across platform and application domains, run incident and problem management including root cause analysis and post-incident reviews, and lead on-call escalations for customer facing issues • Support business continuity at the platform level, including application backup, restore and disaster recovery testing, in coordination with the infrastructure team • Track and report OutSystems licence utilisation (e.g. application objects, users, environments) to support central governance and license cost optimisation • Implement and maintain platform and application security controls, such as secure configuration, secrets management and access policies • Perform threat and risk assessments at the platform and application level, and apply secure configuration profiles • Employ best practices when implementing security controls within the platform and applications • Implement security practices that comply with standards (e.g. IM8) to protect the organisation’s data and applications • Maintain security and compliance evidence for ICT&SS / IM8 and the System Security Plan (SSP), such as configuration baselines, access reviews, scan results and change records • Extend CI/CD pipelines and environment controls to promote agentic AI components (e.g. agent configurations, prompts, guardrail settings) consistently with the same approvals, scanning and rollback as application releases • Provide technical guidance and peer review to other DevSecOps engineers and relevant application teams Experience and Skills Needed • Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines. • At least 4 years of experience relevant to DevSecOps engineering, preferably at the application platform level • Experience operating the OutSystems platform (O11 or OutSystems Developer Cloud), including LifeTime deployment, environment management and platform monitoring • Passion for automation, standardisation and best practices • Excellent understanding of Software Development Life Cycle, Test Driven Development, Continuous Integration and Continuous Delivery • Experience supporting high availability, high performance and high security applications in cloud and hybrid environments • Demonstrable skills in scripting languages such as Bash, PowerShell or Python • Experience with version control systems such as Git • Experience with cloud platforms such as GCC (e.g. AWS, Azure, Google Cloud) • Ability to troubleshoot complex issues ranging from platform configuration to application stack traces • Experience with application performance monitoring and logging tools (e.g. OutSystems monitoring, Elastic, Grafana, CloudWatch) • Knowledge of application security testing tools (e.g. HP Fortify, SonarQube, Sonatype Nexus IQ) and secure coding practices • Knowledge of platform-level backup, restore and disaster recovery • Knowledge of container technologies such as Docker, Kubernetes • Experience with DevOps toolset like GitLab, JIRA, BitBucket, Confluence • Working knowledge of Government ICT&SS management policies (IM8) and SSP requirements, and has applied them to security controls, monitoring and release processes • Experience with observability practices (SLIs/SLOs, distributed tracing, alert design, e.g. OpenTelemetry) and performance testing tools (e.g. JMeter, k6) • Comfortable with Agile methodologies and working closely with product development teams • Strong on collaboration and communication including documentation Added Advantage • OutSystems certifications • Experience with security assessments pertaining to government projects • Worked for an organisation which succeeded DevSecOps transformation • Basic understanding of network infrastructure and Linux, to work effectively with the infrastructure team