Senior DevSecOps & Cloud Security Engineer (PL7326)

Job summary

The Senior DevSecOps and Cloud Security Engineer builds secure, reproducible delivery pipelines and operational controls for a regulated enterprise platform. The role embeds security, reliability, and audit evidence across infrastructure-as-code, CI/CD, identity and access, vulnerability management, observability, backup, disaster recovery, and production readiness, using AWS and/or Azure. It also supports incident response and collaborates with engineering, architecture, privacy, risk, and audit teams.

Qualifications

• At least 7 years of experience in DevOps, platform engineering, cloud security, or site reliability engineering.
• Strong AWS and/or Azure experience, including infrastructure as code, networking, IAM, logging, monitoring, and security services.
• Hands-on CI/CD experience with automated testing and security gates.
• Experience supporting sensitive workloads; banking or financial-services experience preferred, with regulated-industry experience accepted.
• Working knowledge of vulnerability management, secure SDLC, incident response, penetration testing, backup, and disaster recovery.
• Experience with containers, serverless, and modern observability practices.
• Ability to produce audit-ready evidence and work effectively with enterprise control functions.

Responsibilities

• Design and implement infrastructure-as-code, environment provisioning, and secure CI/CD pipelines.
• Integrate code, dependency, container, infrastructure, and secrets scanning into delivery workflows.
• Implement identity and access controls, least privilege, segregation of duties, and privileged-access safeguards.
• Configure secure networking, encryption, key and secrets management, logging, monitoring, alerting, and audit evidence.
• Define vulnerability-management, patching, remediation, and penetration-testing support processes.
• Automate backup, restore, resilience, disaster recovery, and recovery testing against approved RTO/RPO objectives.
• Support privacy, data-residency, records-retention, data-lifecycle, and secure-destruction controls.
• Create operational dashboards, SLOs, alerts, incident runbooks, and production-readiness evidence.
• Partner with enterprise cyber, privacy, architecture, risk, and audit stakeholders.
• Support releases, cutovers, hypercare, incident response, and root-cause analysis.

Skills

Certifications

Industry

Relocation