I'm working with a leading global financial services organisation looking to hire a Principal DevSecOps Engineer to join its Enterprise Cybersecurity function. You'll be responsible for managing and developing a large-scale enterprise secrets management platform, supporting thousands of applications across a global business. This is a hands-on engineering role combining security, cloud infrastructure, automation and production platform management.
You'll play a key role in improving platform reliability, security, performance and automation while helping develop new access management capabilities.
Key Responsibilities
- Own, administer and support enterprise secrets management platforms within critical production environments.
- Manage platform upgrades, monitoring, performance, capacity and disaster recovery readiness.
- Design and implement improvements to access management and security capabilities.
- Develop automation and CI/CD pipelines to improve deployment and operational efficiency.
- Support cloud infrastructure and application integrations, particularly within AWS.
- Build and maintain automated workflows using Python, Ansible and other infrastructure automation tools.
- Work closely with engineering and cybersecurity teams across a global environment.
- Contribute to technical design, architecture, Agile planning and continuous improvement initiatives.
Skills & Experience
- 5+ years' experience administering and operating enterprise secrets management or vault technologies.
- HashiCorp Vault experience is strongly preferred, but candidates with experience in alternative enterprise vault or secrets management platforms will also be considered.
- Strong AWS experience is essential.
- Solid Linux/Unix systems administration experience.
- Strong scripting and automation skills, particularly Python and Ansible.
- Experience with CI/CD tools such as Jenkins, Git, Terraform and Artifactory.
- Understanding of networking, firewalls and load balancing.
- Experience with Docker, Kubernetes and cloud infrastructure.
- Ability to contribute to technical design and architecture decisions.
- Strong communication skills and experience working with technical stakeholders.
The Environment
You'll join an established global cybersecurity engineering team responsible for delivering and maintaining critical access management services across a large enterprise environment.
The team operates using a DevOps and Agile approach, combining systems engineering, software engineering and production support.
The key requirement is strong AWS experience alongside hands-on enterprise secrets management experience. HashiCorp Vault is preferred, but equivalent technologies will be considered.