AI first DevSecOps Engineer

Job summary

Build and operate secure developer-platform products for a regulated environment, including CI/CD pipelines and tools built on GitHub, Artifactory, and Kubernetes-hosted build runners. Apply autonomous agents to toolchain work, design controls for their actions, and improve pipeline security, observability, and reliability. The role emphasizes measured experiments, test-driven development, infrastructure as code, and delivery metrics.

Benefits

Qualifications

• Use test-driven and behaviour-driven development for pipelines, infrastructure, and agents.
• Apply practical DevSecOps, team-owned pipelines, and trunk-based development with short-lived branches.
• Work collaboratively through pairing.
• Review and test infrastructure as code.
• Measure problems and evaluate solutions against those measurements.
• Have practical observability experience, including monitoring, telemetry, logging, tracing, and alerting.
• Have experience improving delivery metrics toward elite DORA performance.
• Use AI tools such as Claude and GitHub Copilot, with interest in AI-first engineering.
• Have experience with CI/CD platforms, patterns, and practices.
• Have experience with C#, Python, or TypeScript.
• Have experience with Terraform, AWS, or Azure.
• Have experience with GitHub, Azure DevOps, or Artifactory.
• Consider user needs and adoption when developing products.
• Teach others through pairing, writing, or internal speaking.

Responsibilities

• Build prototypes and harden those that demonstrate value.
• Apply agents to toolchain tasks such as remediation, pipeline upgrades, scanner triage, and credential rotation.
• Design agent controls for identity, scope, audit trails, and stopping actions.
• Create platform products, including self-service dashboards, MCP servers, and developer tooling.
• Make secure, correct practices the default in CI/CD pipelines.
• Run time-boxed experiments and document decisions.
• Improve observability through monitoring, telemetry, logging, tracing, and alerting.
• Gather feedback directly from delivery teams and use it to inform the roadmap.
• Operate the platform using zero-downtime practices defined and tested in code.

Skills

Industry

Relocation