DevSecOps Engineer

Overview

As the first Senior DevSecOps Engineer, you will own the security, compliance, and technical direction of a Fintech platform. You will integrate security into the DevOps lifecycle, shape tooling choices, and collaborate with engineering and stakeholders to ensure uptime in a regulated environment.

The role emphasizes cloud-native infrastructure, cost-aware architecture, and robust governance. You will drive improvements across CI/CD, serverless and containerized deployments, and incident response. This is a mission-driven opportunity to influence both technical direction and regulatory-compliant operations.

Responsibilities

• Own the technical direction for DevSecOps tooling and architecture
• Integrate security and governance into DevOps processes
• Build and maintain CI/CD pipelines (e.g., Jenkins) ensuring secure deployments
• Develop and manage infrastructure for serverless (Lambdas) and containerized apps (Docker, RDS, Aurora Serverless)
• Design and implement infrastructure as code with Terraform (and Terragrunt)
• Lead AWS cost optimisation and infrastructure strategy
• Ensure data encryption and prevent data leakage in a highly regulated environment
• Create and maintain SOPs for compliance and operational efficiency
• Manage incident response and monitoring (Datadog, PagerDuty)
• Oversee access control and device management (1Password, Google Workspace, JumpCloud)
• Coordinate backups and critical management in GCP and S3 environments
• Automate processes via GitHub Actions

Key requirements

• Senior-level DevSecOps experience
• Strong AWS proficiency (well-architected setups, shared VPCs)
• Hands-on automation with Terraform (Terragrunt a bonus)
• Experience with CI/CD tooling (e.g., Jenkins) and security-focused deployments
• Knowledge of data security, encryption, and leakage prevention
• Familiarity with serverless architectures and event-driven design (Kafka)
• Experience in regulated environments (ISO27001, FCA a bonus)
• Exposure to monitoring/incident tools (Datadog, PagerDuty)
• Access control and IAM practices
• Collaborative, stakeholder-facing communication
• collaboration
• stakeholder management
• problem-solving
• AWS
• Terraform
• Terragrunt

Report this job