DevSecOps Engineer

Let's Write Africa's Story Together!Old Mutual is a firm believer in the African opportunity and our diverse talent reflects this. Job DescriptionAs a DevSecOps Engineer, you will play a key role in the integration of security practices into our DevOps processes, ensuring the highest level of security across the software development lifecycle. This role is suited for a seasoned professional with deep expertise in DevOps, security, and automation. You will provide mentorship to team members and collaborate with various stakeholders to enhance the organization's security posture.Group Technology & Data | MDMDescriptionSecurity Automation Leadership: Play s key role in the development and optimization of security automation scripts and tools within CI/CD pipelines. Champion the implementation of advanced automated security testing processes. Vulnerability Management and Remediation: Oversee and manage vulnerability scanning and assessment processes, ensuring swift identification and remediation of security vulnerabilities. Security Monitoring: Lead the design, implementation, and maintenance of comprehensive security monitoring solutions. Incident Response: Drive incident response efforts, analyze security events, and contribute to continuous improvement of response capabilities. Infrastructure as Code (IaC) Excellence: Enforce security best practices in Infrastructure as Code (IaC) scripts. Collaborate with DevOps teams to integrate advanced security measures into infrastructure provisioning. Secure Configuration Management: Implement secure configuration management practices for infrastructure components. Set and monitor secure configuration baselines in collaboration with operations teams. Security Governance and Compliance: Lead the establishment of security governance policies and compliance standards. Collaboration and Mentorship: Collaborate with cross-functional teams, providing guidance on security practices in DevOps processes. Mentor and coach junior and intermediate DevSecOps engineers. Qualifications and ExperienceBachelor's degree in Computer Science, Information Security or a related discipline, or equivalent practical experience.5+ years of relevant experience across DevOps, cloud engineering, cybersecurity or platform security.Proven experience leading DevSecOps initiatives and embedding security into enterprise delivery pipelines.Strong practical experience securing AWS and Azure cloud environments.Advanced understanding of CI/CD, Infrastructure as Code, container security and automated vulnerability management.Expert scripting and automation capabilities using Python and/or Bash.Strong knowledge of IAM, encryption, secrets management, secure configurations and security incident response.Experience with Linux, Docker, ECS/Fargate, cloud monitoring and production operations.Working knowledge of SQL, REST APIs and enterprise integration troubleshooting.Relevant AWS, Azure, DevSecOps or advanced security certifications are advantageous.Technology StackCloud platforms: AWS, Microsoft AzureAWS services: ECS, Fargate, EC2, RDS, S3, IAM, CloudWatch, cloud networkingCI/CD: Azure DevOps, GitHub Actions, Jenkins, GitLab CI/CDInfrastructure as Code: Terraform, AWS CloudFormation, Bicep or equivalentContainers: Docker, container registries, image scanning and hardeningOperating systems: Linux administration, patching, shell scripting and log analysisScripting and automation: Python, BashSecurity: Vulnerability scanning, security testing, secrets management, encryption, IAM and compliance controlsMonitoring and observability: AWS CloudWatch, Azure Monitor and enterprise monitoring platformsVersion control: Git and collaborative development workflowsDatabases and SQL: Amazon RDS, SQL querying, database access controls and connectivity troubleshootingAPI and integration security: REST APIs, HTTP, JSON, authentication, certificates, Postman and curl SkillsAction Planning, Application Development, Data Compilation, Data Management, Evaluating Information, Executing Plans, Information Technology (IT) Support, IT Network Security, Market Analysis, Product Development, Test Case ManagementCompetenciesBusiness InsightCourageCultivates InnovationCustomer FocusDecision QualityDrives ResultsEnsures AccountabilityManages AmbiguityEducationNQF Level 7 - Degree, Advance Diploma or Postgraduate Certificate or equivalentClosing Date09 November 2026 , 23:59The appointment will be made from the designated group in line with the Employment Equity Plan of Old Mutual South Africa and the specific business unit in question.The Old Mutual Story!