DevSecOps Engineer

JD:

Required Experience & Skills

Mandatory

• Degree or diploma in Computer Science, Computer or Electronics Engineering, IT or related disciplines.
• Passion for automation, standardisation, and best practices in infrastructure and security.
• Strong understanding of the Software Development Life Cycle (SDLC), Test- Driven Development (TDD), Continuous Integration (CI), and Continuous Delivery(CD).
• Track record in agentic AI system design with multi-agent pipeline, Bedrock AgentCore, orchestration and MCP Server, RAG knowledge base, HITL architecture.
• Experience in regulatory or compliance contexts where agent outputs must be accurate, auditable and structured for legal decision-makers is a significant advantage.
• Experience working with high availability, high performance and high-security multi-data centre systems and hybrid cloud environments.
• Proficiency in at PowerShell, Python.
• Experience with Git and modern branching workflows.
• Strong understanding of container technologies (Docker, Kubernetes).
• Experience with infrastructure monitoring and observability tools.
• Strong ability to troubleshoot complex issues across system resources and application stacks.
• Experience with CI/CD pipelines (GitHub Actions, GitLab CI).
• Experience with disaster recovery planning, system backup, and restore processes.
• Knowledge of RPM-based software packaging and deployment;
• Experience implementing security controls within CI/CD pipelines and cloud- native architectures.
• Hands-on experience with security assessments, vulnerability scanning and system hardening.
• Strong understanding of network infrastructure, including firewalls, subnets, routing and access controls.
• Experience performing security assessments in government or highly regulated environments.

Added advantage

• Security certifications such as CREST, CISSP, CISM or relevant cloud security credentials.
• Experience working in an organisation that successfully implemented DevSecOps transformation.
• Hands-on experience with API security, secrets management and zero-trust architectures.
• Experience developing and deploying systems on GCC.
• Experience building on OutSystems Platform and/or experience building applications designed to operate as part of a larger shared platform.
• Legal regulatory domain familiarity: Contextual knowledge on legal, enforcement or insolvency workflows to better understand how users interact with the system and how it should help them.