Work with us to build modern Insurtech AI underpinned solutions, we are a growing team of hands on architects striving to build high quality solutions for our internal and external customers. The DevSecOps Engineer implements and maintains CI/CD pipelines, infrastructure automation, and security controls across the Client insurance ecosystem. This role combines software development, operations, and security expertise to enable rapid, secure, and reliable software delivery with emphasis on shift-left security practices and automation using Microsoft Azure as the primary platform.

Key Responsibilities :

CI/CD Pipeline Development :

- Designs and implements comprehensive CI/CD pipelines using Azure DevOps Pipelines, GitHub Actions, and GitLab CI automating build, test, security scanning, and deployment processes.

- Creates pipeline-as-code using YAML ensuring version control, peer review, and repeatability.

- Implements multi-stage pipelines supporting development, testing, staging, and production environments with appropriate quality gates and approval workflows.

- Designs pipeline templates and reusable components accelerating pipeline creation across teams while ensuring consistency and best practices.

- Integrates automated testing including unit tests, integration tests, end-to-end tests, and performance tests within pipelines ensuring quality before deployment.

Infrastructure as Code & Automation :

- Automates infrastructure provisioning using Terraform for multi-cloud deployments, Azure Bicep for Azure-native resources, ARM templates for complex Azure configurations, and Pulumi for developer-friendly infrastructure definitions.

- Implements GitOps workflows ensuring all infrastructure changes are version controlled, reviewed, and traceable.

- Designs modular, reusable infrastructure code with parameterization supporting multiple environments and configurations.

- Implements infrastructure testing validating configurations before deployment using tools like Terratest and policy validation frameworks.

- Creates self-service infrastructure provisioning enabling development teams to request resources through standardized templates while maintaining governance and cost control.

Container Orchestration & Management :

- Implements containerization strategies using Docker for application packaging ensuring consistency across environments.

- Designs Kubernetes deployments, services, config maps, secrets, and persistent volume configurations supporting stateless and stateful applications.

- Creates Helm charts for application packaging and deployment enabling version management and configuration templating.

- Implements Kubernetes security best practices including pod security policies, network policies, RBAC, and secrets management.

- Designs container image pipelines including building, scanning, signing, and publishing to container registries (Azure Container Registry, Harbor).

- Implements container monitoring and logging collecting metrics and logs from containerized applications.

Security Integration & Shift-Left :

- Integrates security scanning tools into CI/CD pipelines including static application security testing (SAST) using SonarQube and Checkmarx, dynamic application security testing (DAST), software composition analysis (SCA) using Snyk and WhiteSource for vulnerability scanning, and infrastructure scanning using Checkov and Terrascan.

- Implements container image scanning detecting vulnerabilities in base images and application dependencies before deployment.

- Integrates secrets scanning preventing hardcoded credentials, API keys, and certificates from being committed to source control.

- Implements security quality gates blocking deployments failing security thresholds ensuring vulnerabilities are addressed before production.

- Creates security dashboards and reports providing visibility into security posture across applications and infrastructure.

Cloud Infrastructure Management :

- Manages Azure infrastructure including compute (Virtual Machines, App Services, AKS), networking (Virtual Networks, Load Balancers, Application Gateway), storage (Blob Storage, Azure Files), and platform services.

- Implements infrastructure monitoring using Azure Monitor, Log Analytics, and Application Insights collecting metrics, logs, and traces.

- Designs auto-scaling configurations optimizing resource utilization based on demand patterns.

- Implements disaster recovery and backup strategies ensuring business continuity.

- Manages cost optimization implementing resource tagging, right-sizing recommendations, and reserved instance planning.

Required Skills :

- CI/CD : Azure DevOps Pipelines, GitHub Actions, GitLab CI, Jenkins

- Infrastructure as Code : Terraform, Bicep, ARM templates, Pulumi

- Containers : Docker, Kubernetes, Helm charts

- Security : Security scanning tools (SonarQube, Checkmarx, Snyk)

Required Experience :

- Five or more years in DevOps, systems engineering, or software development with three years implementing CI/CD pipelines and infrastructure automation.

- Hands-on experience with Azure DevOps and GitHub Actions building production pipelines.

- Proven track record automating infrastructure using Terraform or Bicep managing cloud resources at scale.

- Experience with container technologies including Docker and Kubernetes deploying containerized applications.

- Evidence of integrating security tools into pipelines implementing shift-left security practices.

- Experience troubleshooting production issues, participating in incident response, and implementing reliability improvements.

- Preference for candidates with insurance or financial services experience understanding regulatory compliance requirements.

Required Certifications :

- Microsoft Certified : Azure DevOps Engineer Expert (AZ-400), Microsoft Certified : Azure Administrator Associate (AZ-104). Valuable additions : AWS Certified DevOps Engineer - Professional, Certified Kubernetes Administrator (CKA), HashiCorp Certified Terraform Associate, Certified Kubernetes Security Specialist (CKS).

Key Competencies :

- Automation Mindset - Identifying opportunities for automation, reducing manual processes, improving efficiency, and enabling self-service capabilities.

- Security Awareness - Understanding security principles, implementing security controls, detecting vulnerabilities, and promoting security-first culture.

- Problem Solving - Troubleshooting complex issues, analyzing root causes, implementing permanent fixes, and preventing recurrence.

- Collaboration - Working effectively with cross-functional teams, sharing knowledge, documenting processes, and promoting DevSecOps practices across organization.