Client: Our client is a global asset, investment, and financial product management company operating in the United States and more than 40 other countries.
Project overview: The project focuses on building a secure, automated, and scalable cloud platform that supports continuous delivery across multiple environments. You will help strengthen infrastructure security, streamline CI CD processes, and improve operational efficiency through automation.
Position overview: We are looking for a Senior DevSecOps Engineer with strong experience in AWS or Azure cloud environments and a focus on automation, security, and CI CD practices. In this role, you will contribute to building reliable infrastructure, enhancing deployment pipelines, and ensuring compliance with security standards.
Technology stack: AWS, Azure, EC2, S3, Lambda, CloudFormation, ECS, VPC, IAM, Azure Virtual Network, Function App, Storage Account, Key Vault, Container Apps, Terraform, Jenkins, Groovy, GitHub Actions, Git, Linux, Windows Server, Docker, Python, Bash
- Responsibilities: Provide guidance and implementation support for secure cloud infrastructure across AWS and Azure environments
-
Develop and maintain CI CD pipelines using Jenkins and GitHub Actions
-
Automate operational processes to reduce manual effort and improve efficiency
-
Manage vulnerability scanning, credential rotation, and secret management practices
-
Apply IAM best practices with a focus on least privilege and compliance requirements
-
Perform patch management across Linux and Windows environments, including application and dependency updates
-
Coordinate patching schedules and downtime windows with cross functional teams
-
Implement and maintain Infrastructure as Code using Terraform
-
Maintain Jenkins pipelines, including Groovy scripting, plugin management, and access control
-
Collaborate with development teams to integrate container and dependency scanning into build pipelines
-
Monitor infrastructure health and contribute to incident response and remediation activities
- Requirements: Experience working with cloud platforms such as AWS or Azure
-
Hands on experience with core AWS services including EC2, S3, Lambda, VPC, IAM, CloudFormation, ECS
-
Hands on experience with core Azure services including Virtual Network, Function App, Storage Account, Key Vault, and Container Apps
-
Experience with Infrastructure as Code using Terraform
-
Experience building and maintaining CI CD pipelines using Jenkins and GitHub Actions
-
Knowledge of GitFlow and branching strategies
-
Experience in vulnerability scanning, secret management, and credential rotation
-
Understanding of IAM principles and compliance practices
-
Experience with patch management on Linux and Windows systems
-
Ability to work with Groovy scripts in Jenkins pipelines
-
Experience coordinating changes, patch cycles, and deployment schedules
-
Basic scripting skills using Python or Bash
- Nice to have: Experience with incident response and troubleshooting production issues
-
Familiarity with cost optimization, tagging strategies, and multi account governance
-
Experience with configuration management and GitOps workflows
-
Knowledge of declarative pipelines, shared libraries, and multibranch pipeline setups
-
Experience managing Jenkins agents and artifact storage
-
Hands on experience with Docker containers in CI CD workflows
-
Familiarity with Wiz, HashiCorp Vault, or CyberArk
-
Experience working with ServiceNow for change and incident tracking
-
Ability to document processes and solutions in Confluence
