Job Description

Role Overview

The DevSecOps Engineer is a mid-level, 5-7 years of experience, technical role responsible for designing, building, and maintaining DevSecOps pipelines that enable continuous integration and continuous delivery (CI/CD) across the programme's application development and deployment lifecycle. Reporting to the Infrastructure Lead, this role plays a critical enabling function across the build, test, and deployment phases of the core banking and payments transformation, ensuring that development teams have robust, secure, and efficient pipelines to support rapid and reliable software delivery. The DevSecOps Engineer is expected to be a strong hands-on technical contributor with deep familiarity across the end-to-end DevSecOps toolchain and a continuous improvement mindset.

Key Responsibilities

• Design, build, and maintain CI/CD pipelines to support application development, testing, and deployment activities across the programme's SDLC lifecycle
• Integrate security controls and automated security checks into pipelines at every stage, embedding a shift-left security approach across the development lifecycle
• Configure and manage DevSecOps tooling across key functions including source code control, code scanning, static and dynamic analysis, code merging, dependency management, code packaging, and artefact management
• Implement and maintain automated testing integrations within pipelines, coordinating with the Test Automation Lead to ensure functional, regression, and security test suites are triggered and reported correctly
• Manage version control processes and branching strategies, ensuring consistency and traceability across development streams and release branches
• Continuously monitor, maintain, and iterate on existing pipelines to improve deployment efficiency, reduce build times, and address bottlenecks as the programme scales through successive test cycles and releases
• Support the build and test phases of application rollout, providing hands-on pipeline support to development and testing teams throughout the SDLC lifecycle
• Troubleshoot and resolve pipeline failures, environment issues, and deployment blockers in a timely manner, escalating complex issues to the Infrastructure Lead as appropriate
• Collaborate with the Security Architect to ensure that security scanning, vulnerability management, and compliance checks are embedded within pipeline workflows and aligned to the programme's security standards
• Maintain comprehensive documentation for all pipeline configurations, tooling setups, and operational runbooks to ensure repeatability and knowledge continuity across the team
• Support environment provisioning and infrastructure-as-code activities using tools such as Terraform, Ansible, or equivalent, coordinating with the broader infrastructure team
• Contribute to the continuous improvement of DevSecOps practices, evaluating new tools and techniques and recommending enhancements to the Infrastructure Lead

Job Requirements