Job Description

We are looking for experienced DevSecOps Engineers to integrate security practices into every stage of the software development and deployment lifecycle. This role plays a critical part in designing secure, scalable, and automated infrastructure within a cloud-native banking and fintech environment The role ensures systems are resilient, compliant, and aligned with industry best practices for CI/CD, containerization, and infrastructure as code (IaC).

The ideal candidate has a strong foundation in DevOps principles with hands-on experience embedding security across cloud platforms, pipelines, and production environments.

Key Responsibilities:

• Implement security automation tools and frameworks within CI/CD pipelines and cloud infrastructure environments.
• Collaborate with development, QA, and cybersecurity teams to ensure secure application delivery across environments.
• Identify, assess, and remediate vulnerabilities in containers, dependencies, and cloud configurations.
• Develop and maintain Infrastructure as Code (IaC) scripts using tools like Terraform, Ansible, or CloudFormation.
• Support secure deployment and orchestration using Kubernetes, Docker, and serverless technologies.
• Monitor and improve cloud security posture using tools such as AWS Config, Azure Security Center, or GCP Security Command Center.
• Assist in security audits, incident response, and the implementation of best practices across development and operations.
• Create technical documentation and share knowledge through security-focused enablement within engineering teams.

Qualifications:

• Bachelors degree in Computer Science, Information Security, or a related field.
• 3-5 years of hands-on experience in DevOps or Cloud Engineering, with at least 2 years focused on DevSecOps or secure DevOps practices
• Proficiency with CI/CD tools (e.g., Jenkins, GitLab CI, Azure DevOps) and IaC frameworks (e.g., Terraform, Ansible).
• Strong knowledge of container security, secrets management, and automated scanning tools (e.g., Aqua, Prisma Cloud, Snyk).
• Familiarity with cloud platforms (AWS, Azure, or GCP) and cloud security principles.
• Experience implementing or supporting compliance frameworks (e.g., PCI-DSS, ISO 27001, NIST) is a plus.
• Security certifications (e.g., GIAC, CEH, AWS Security Specialty, DevSecOps Foundation) are advantageous.
• Strong scripting and automation skills (Bash, Python, PowerShell, etc.).