Senior DevSecOps Engineer

Job summary

Designs, builds, integrates, and deploys secure DevSecOps pipelines and automation for on-premises, mission-critical CIS environments. The role embeds security and compliance across the software development lifecycle, including vulnerability management, Infrastructure as Code, containerized workloads, testing, deployment, and operational documentation. It uses technologies such as GitLab, Terraform, Ansible, Docker, Kubernetes, and Prometheus to support secure, interoperable services.

Qualifications

• At least five years of experience in DevSecOps, DevOps, software engineering, platform engineering, or infrastructure automation
• Experience supporting on-premises CIS environments, enterprise data centres, and mission-critical systems
• Hands-on experience with secure CI/CD pipelines such as GitLab, Jenkins, or Azure DevOps
• Experience with Infrastructure as Code and automation tools such as Terraform, Ansible, or Puppet, and scripting in Python, Bash, or PowerShell
• Docker and Kubernetes experience, including container security and image lifecycle management
• Experience with secrets management, identity and access management, and secure configuration
• Experience with Linux, Windows Server, and virtualization platforms
• Monitoring and observability experience with Prometheus, Grafana, Elastic, or equivalent
• Professional fluency in English
• Experience in military, defence, government, or other mission-critical environments is desirable
• Previous NATO or NCIA project experience is desirable

Responsibilities

• Design, implement, and maintain DevSecOps pipelines and automation frameworks in secure on-premises environments
• Develop technical designs and install, configure, and integrate DevSecOps components
• Plan and conduct testing and acceptance activities; support deployment and migration
• Embed security controls and compliance requirements in the software development lifecycle
• Implement SAST, DAST, SCA, and vulnerability management processes
• Implement Infrastructure as Code, configuration management, and automated deployment
• Deploy and support containerized and cloud-native workloads on-premises
• Produce technical documentation, deployment procedures, architecture diagrams, security artefacts, and handover documentation
• Contribute to risk mitigation, quality assurance, and project governance
• Report on progress, milestones, risks, issues, quality findings, planned activities, and escalations

Skills

Certifications

Degrees

Languages

Work schedule

Travel

Industry

Security clearance

Relocation