DevSecOps Engineer – Cloud & Security Automation

About the role

We are seeking an experienced DevSecOps Engineer to design, build, and maintain our AWS cloud infrastructure. You will drive container‑based workloads on Amazon ECS and embed security practices throughout the software delivery lifecycle, collaborating with development, QA, and product teams.

Key responsibilities

• Contribute to AWS migration and modernisation, moving workloads to Amazon ECS (EC2 and Fargate).
• Design and manage ECS clusters, task definitions, services, load balancers, and capacity providers.
• Administer VPC networking, subnets, security groups, NAT gateways, VPC peering, and PrivateLink.
• Manage EC2 instances, Auto Scaling groups, launch templates, and Amazon RDS (PostgreSQL/MySQL) resources.
• Author reusable Terraform modules for ECS, VPC, IAM, CloudWatch, and more, with remote state management.
• Build and maintain CI/CD pipelines using Jenkins, GitHub Actions, GitLab CI/CD, and AWS CodePipeline/CodeBuild.
• Automate Docker image builds, vulnerability scanning, and deployments with blue‑green or rolling strategies.
• Integrate SAST/DAST, secrets management, and compliance gates into pipelines.

Required profile

• 4‑5+ years of experience in cloud infrastructure, container orchestration, and DevSecOps.
• Strong understanding of security best practices (OWASP Top 10, SAST/DAST, secrets management).
• Proven ability to work collaboratively across development, QA, and product teams.

Required skills

• AWS (ECS, EC2, Fargate, ALB/NLB, VPC, RDS, ECR, Secrets Manager, Systems Manager).
• Terraform (module development, remote state, workspaces).
• Docker and container image security scanning.
• CI/CD tools: Jenkins, GitHub Actions, GitLab CI/CD, AWS CodePipeline/CodeBuild.
• Automation of blue‑green and rolling deployments.
• SAST/DAST tooling and vulnerability scanning.