Jobs → Engineering → DevSecOps Engineer

About the Role We are looking for a DevSecOps Engineer to join our client's team. This role focuses on designing, building, and maintaining secure CI/CD pipelines and managing cloud infrastructure with a focus on security. Key Responsibilities • Design, build, and maintain secure CI/CD pipelines by embedding automated security testing and vulnerability scanning into the deployment process • Provision, secure, and manage cloud infrastructure across AWS or GCP using Infrastructure as Code (Terraform) and container orchestration tools • Conduct vulnerability assessments, manage security gates, and ensure all systems comply with IAM best practices and OWASP Top 10 standards • Collaborate seamlessly with development and operations teams to troubleshoot issues, automate security workflows, and align with Spec Driven Development (SDD) practices Requirements • Minimum 3 years of experience in DevOps, Cloud Engineering, or DevSecOps • Hands-on experience with CI/CD pipelines (GitLab CI/CD, Jenkins, GitHub Actions) and implementing SAST, DAST, SCA, container scanning, and security gates • Strong knowledge of AWS/GCP cloud security, IAM best practices, and familiarity with Docker, Kubernetes (EKS/GKE), and Terraform (IaC) • Knowledge of OWASP Top 10, vulnerability management, and hands-on experience with security tools like SonarQube, Trivy, or Burp Suite • Good communication and teamwork skills • Nice to have: AWS or GCP certifications, and experience with Spec Driven Development (SDD)