DevSecOps Engineer

JD:

Required Experience & Skills

Mandatory

• Degree or diploma in Computer Science, Computer or Electronics Engineering, IT or related disciplines.

• Passion for automation, standardisation, and best practices in infrastructure and security.

• Strong understanding of the Software Development Life Cycle (SDLC), Test- Driven Development (TDD), Continuous Integration (CI), and Continuous Delivery(CD).

• Track record in agentic AI system design with multi-agent pipeline, Bedrock AgentCore, orchestration and MCP Server, RAG knowledge base, HITL architecture.

• Experience in regulatory or compliance contexts where agent outputs must be accurate, auditable and structured for legal decision-makers is a significant advantage.

• Experience working with high availability, high performance and high-security multi-data centre systems and hybrid cloud environments.

• Proficiency in at PowerShell, Python.

• Experience with Git and modern branching workflows.

• Strong understanding of container technologies (Docker, Kubernetes).

• Experience with infrastructure monitoring and observability tools.

• Strong ability to troubleshoot complex issues across system resources and application stacks.

• Experience with CI/CD pipelines (GitHub Actions, GitLab CI).

• Experience with disaster recovery planning, system backup, and restore processes.

• Knowledge of RPM-based software packaging and deployment;

• Experience implementing security controls within CI/CD pipelines and cloud- native architectures.

• Hands-on experience with security assessments, vulnerability scanning and system hardening.

• Strong understanding of network infrastructure, including firewalls, subnets, routing and access controls.

• Experience performing security assessments in government or highly regulated environments.

Added advantage

• Security certifications such as CREST, CISSP, CISM or relevant cloud security credentials.

• Experience working in an organisation that successfully implemented DevSecOps transformation.

• Hands-on experience with API security, secrets management and zero-trust architectures.

• Experience developing and deploying systems on GCC.

• Experience building on OutSystems Platform and/or experience building applications designed to operate as part of a larger shared platform.

• Legal regulatory domain familiarity: Contextual knowledge on legal, enforcement or insolvency workflows to better understand how users interact with the system and how it should help them.