DevSecOps Engineer

We are seeking a DevSecOps Engineer to design, secure, and scale the cloud infrastructure and deployment pipelines powering our SaaS platform.

In this role, you will be responsible for building a secure, automated, and highly visible delivery ecosystem where Azure cloud infrastructure, Bitbucket CI/CD pipelines, and Jira workflows are tightly integrated. You will ensure that deployments are secure, traceable, compliant, and aligned with engineering best practices.

Key Responsibilities

• Provision, manage, and scale Microsoft Azure infrastructure using Terraform (Infrastructure as Code).
• Maintain secure, scalable, and highly available cloud environments across development, staging, and production.
• Implement monitoring, logging, and observability solutions using Azure Monitor, Log Analytics, and Grafana.
• Optimize cloud architecture, networking, identity, and access management.

• Design, build, and maintain automated CI/CD pipelines using Bitbucket Pipelines.
• Manage Git workflows, branch strategies, pull request processes, and deployment automation.
• Improve release reliability, deployment speed, and operational efficiency.
• Integrate deployment workflows with Jira for end-to-end traceability.

• Embed security controls into CI/CD pipelines, including SAST, SCA, dependency, and vulnerability scanning.
• Implement and manage tools such as Snyk, SonarQube, Aikido, or similar security platforms.
• Investigate, prioritize, and remediate security vulnerabilities.
• Support SOC 2 compliance initiatives by maintaining audit trails, security controls, and evidence collection processes.

• Partner with Software Engineers and QA teams to improve developer experience and release quality.
• Participate in Agile ceremonies and contribute to planning, estimation, and delivery activities.
• Promote DevSecOps best practices across the engineering organization.

• Minimum 3 years of experience in DevOps, Cloud Infrastructure, Site Reliability Engineering, or related fields.
• At least 1 year of hands-on DevSecOps or cloud security experience.
• Experience integrating Jira and Bitbucket workflows.
• Understanding of cloud security best practices, IAM, networking, and compliance frameworks such as SOC 2.
• Strong troubleshooting and automation mindset.

• Hands-on experience designing and managing Azure infrastructure using Terraform (IAC).

• Proven experience building and maintaining CI/CD pipelines using Bitbucket Pipelines and Git workflows.

• Experience integrating security scanning tools (e.g., Snyk, SonarQube, Aikido) into CI/CD pipelines and managing vulnerability remediation.