DevSecOps & Platform Engineer

About the Role We are seeking a DevSecOps Engineer to drive cloud operations, security automation, observability, and platform engineering initiatives across a modern cloud-native environment. This role will play a key part in strengthening operational excellence, enhancing automation capabilities, and ensuring secure, scalable, and reliable digital services. You will work closely with product, engineering, infrastructure, and security teams to embed DevSecOps practices, improve cloud operations, and establish reusable platform capabilities that support long-term digital transformation objectives. Key Responsibilities Platform Engineering & DevSecOps Enablement Design, build, implement, and support shared DevSecOps capabilities for digital products and platforms. Develop reusable platform components and engineering standards. Integrate observability practices into product delivery. Maintain supporting documentation, frameworks, and operational controls required for ongoing service delivery and business continuity. Cloud Operations & Automation Implement Infrastructure as Code (IaC) and cloud automation solutions. Automate operational processes and create reusable infrastructure components. Develop automated workflows for provisioning, configuration, maintenance, and operational support. Optimise cloud operations to maximise efficiency, consistency, and scalability. Security Engineering & Compliance Embed security-by-design principles throughout the application and infrastructure lifecycle. Integrate automated security validation and compliance controls into CI/CD pipelines. Strengthen vulnerability management, threat detection, and remediation processes. Ensure solutions comply with applicable security, governance, and audit requirements. Infrastructure Reliability & Observability Support the reliability, performance, and availability of cloud-hosted applications and shared services. Diagnose and resolve issues across distributed cloud environments. Implement and maintain: Monitoring frameworks, Service health dashboards, Alerting standards, Operational runbooks, Observability tooling. Contribute to incident response, problem management, and continual service improvement. Requirements Education & Experience Degree or Diploma in Computer Science, Computer Engineering, Electronics Engineering, Information Technology, or a related discipline. Relevant experience in DevSecOps, Site Reliability Engineering (SRE), Cloud Platform Engineering, or similar roles. Experience designing and operating security, automation, and observability solutions within cloud-native environments. Experience supporting highly regulated environments will be advantageous. Observability & Monitoring Experience implementing observability across applications, infrastructure, and cloud services. Ability to collect and correlate: Metrics, Logs, Traces. Experience building service health dashboards, alerting frameworks, and supporting root cause analysis. Familiarity with enterprise observability platforms and monitoring standards. Cloud Automation & Infrastructure as Code Strong experience with Infrastructure as Code, configuration management, and cloud automation. Experience automating: Cloud provisioning, Certificate lifecycle management, Linux patching, Compliance validation, Routine maintenance, Recovery processes. Ability to build reusable automation modules and operational workflows. Security & Governance Experience embedding security controls within cloud platforms and CI/CD pipelines. Knowledge of: Vulnerability management, Secrets management, Certificate management, Identity and access controls, Security monitoring, Remediation tracking. Strong understanding of governance, compliance, audit, and risk management requirements. Technical Skills Strong scripting and automation skills using: Python, Bash, PowerShell Hands-on experience with: AWS or other major cloud platforms, Docker, Kubernetes, CI/CD tools, Git-based development workflows, Terraform, Ansible. Familiarity with: Monitoring and logging platforms, API integrations, Secrets management solutions, Automated testing frameworks.