IT & Systems Engineer (DevSecOps)

This role involves developing and managing continuous integration, continuous delivery (CI/CD), and GitOps pipelines to ensure secure, efficient, and scalable software deployment in cloud-native settings. The engineer will integrate DevSecOps principles to enhance the security, reliability, and performance of system deployments, reporting directly to the IT Development Manager.

1. Design, implement, and maintain CI/CD pipelines, specifically using GitHub Actions, for automated software delivery.
2. Establish GitOps-based deployment workflows utilizing ArgoCD.
3. Support advanced deployment strategies like blue/green and canary deployments within Kubernetes.
4. Automate infrastructure provisioning through Infrastructure as Code, with a preference for Terraform.
5. Manage containerization and orchestration using Docker and Kubernetes, including developing and maintaining Kubernetes manifests.
6. Diagnose and resolve pipeline and deployment issues across various environments.
7. Document all CI/CD processes and policies thoroughly.
8. Integrate security tools and practices into CI/CD pipelines (DevSecOps) to ensure policy and regulatory compliance.
9. Implement and maintain container and code security tools such as Snyk, Aqua Security, Anchore, and CodeQL.
10. Automate security testing (SAST, DAST, IAST) and vulnerability management.
11. Work with the IT team to address vulnerabilities, apply patches, and mitigate risks to enhance system security.
12. Ensure adherence to industry best practices and organizational security policies.
13. Manage secrets and credentials using tools like HashiCorp Vault or Azure Key Vault.
14. Deploy monitoring, logging, and performance optimization solutions for tracking service, application, and infrastructure health.
15. Oversee the underlying IT infrastructure, including servers, networking, storage, and virtualization, that supports deployed systems.
16. Collaborate with development, security, and operations teams to build secure, scalable architectures meeting availability, performance, and maintainability standards.
17. Identify and resolve bottlenecks in the software development lifecycle to improve application delivery.
18. Enhance real-time incident response through documentation, runbooks, and modules.
19. Engage in Agile ceremonies and continuous improvement efforts to boost efficiency.
20. Implement and maintain version control systems, configuration management tools, and other DevOps technologies.
21. Undertake projects and reporting as assigned by the IT Development Manager or Director IT.

1. Bachelor of Science in Computer Science or an equivalent degree from a recognized university.
2. Professional IT Security certifications (e.g., CISSP, CCSP, CISA, CISM) are advantageous.
3. A minimum of 3 years of experience in a similar role.
4. Proficiency in scripting and coding languages such as Python, JavaScript, and React.js.
5. Demonstrated ability to drive change within a DevOps culture and advocate for process automation and improvement.
6. Capability to investigate reliability and performance issues using automated scanning and monitoring tools.
7. Strong understanding of cybersecurity principles, including secure coding, encryption, threat modeling, and vulnerability management.
8. Practical experience with security testing tools like OWASP ZAP, Burp Suite, or Nessus.
9. Familiarity with compliance frameworks and standards such as GDPR, ISO 27001, and NIST.
10. Ability to effectively use B/OSS tools for accurate and timely information recording.
11. Extensive knowledge of DevSecOps and cloud-native tools, including CI/CD platforms (GitHub Actions, Azure DevOps, Jenkins, GitLab CI), GitOps tools (ArgoCD), Infrastructure as Code (Terraform preferred), and containerization/orchestration (Docker, Kubernetes).
12. Experience with container and code security scanning tools (e.g., Snyk, Aqua Security, Anchore, CodeQL) and secrets management solutions (e.g., HashiCorp Vault, Azure Key Vault).
13. Comprehensive understanding and management skills for IT infrastructure, including servers, networking, storage, and virtualization across on-premises and cloud environments.
14. Strong knowledge of operating systems, networking, virtualization, and cloud platforms (Azure, GCP).