DevSecOps Engineer

Key Responsibilities

• Build and maintain CI/CD pipelines that support Agile teams and ARTs.
• Provision and manage environments (development, test, staging, production).
• Use infrastructure as Code (IaC) tools (i.e., Terraform, Helmfile, Ansible, Kubernetes Manifests) to ensure reproducibility and compliance.
• Ensure high availability and resilience in cloud and on-prem environments (e.g., zero-downtime deployment, blue/green and canary release strategies).
• Manage the automation and toolchain integration for code quality, security scanning, release management and monitoring; automate repetitive tasks to improve flow efficiency across the value stream, ensure the toolchain aligns with the Lean-Agile principles.
• Work closely with System Architects, Release Train Engineers (RTEs) and agile teams to align on delivery practices.
• Provide DevOps coaching to teams so they adopt the right practices for version control, branching strategies, and automated testing.
• Support Program Increment (PI) planning by ensuring environments and pipelines are ready.
• Develop security practices (e.g., Secrets Management) into the software delivery CI pipelines to ensure the artefacts are of premium quality level (shift-left security).
• Automate compliance checks and enforce policies (e.g., code signing, container scanning).
• Develop systems observability practices (e.g., monitoring, logs, traces) to define and track metrics like deployment frequency, lead time for changes, change failure rate, and MTTR.
• Collaborate with InfoSec and Compliance teams to run regular security audits, risk assessments and data assessments.