DevSecOps Engineer

**Let's Write Africa's Story Together!** Old Mutual is a firm believer in the African opportunity and our diverse talent reflects this. **Job Description** As a DevSecOps Engineer, you will play a key role in the integration of security practices into our DevOps processes, ensuring the highest level of security across the software development lifecycle. This role is suited for a seasoned professional with deep expertise in DevOps, security, and automation. You will provide mentorship to team members and collaborate with various stakeholders to enhance the organization's security posture. Group Technology \& Data \| MDM **Description** * Security Automation Leadership: Play s key role in the development and optimization of security automation scripts and tools within CI/CD pipelines. Champion the implementation of advanced automated security testing processes. * Vulnerability Management and Remediation: Oversee and manage vulnerability scanning and assessment processes, ensuring swift identification and remediation of security vulnerabilities. * Security Monitoring: Lead the design, implementation, and maintenance of comprehensive security monitoring solutions. * Incident Response: Drive incident response efforts, analyze security events, and contribute to continuous improvement of response capabilities. * Infrastructure as Code (IaC) Excellence: Enforce security best practices in Infrastructure as Code (IaC) scripts. Collaborate with DevOps teams to integrate advanced security measures into infrastructure provisioning. * Secure Configuration Management: Implement secure configuration management practices for infrastructure components. Set and monitor secure configuration baselines in collaboration with operations teams. * Security Governance and Compliance: Lead the establishment of security governance policies and compliance standards. * Collaboration and Mentorship: Collaborate with cross\-functional teams, providing guidance on security practices in DevOps processes. Mentor and coach junior and intermediate DevSecOps engineers. **Qualifications And Experience** * Bachelor's degree in Computer Science, Information Security or a related discipline, or equivalent practical experience. * 5\+ years of relevant experience across DevOps, cloud engineering, cybersecurity or platform security. * Proven experience leading DevSecOps initiatives and embedding security into enterprise delivery pipelines. * Strong practical experience securing AWS and Azure cloud environments. * Advanced understanding of CI/CD, Infrastructure as Code, container security and automated vulnerability management. * Expert scripting and automation capabilities using Python and/or Bash. * Strong knowledge of IAM, encryption, secrets management, secure configurations and security incident response. * Experience with Linux, Docker, ECS/Fargate, cloud monitoring and production operations. * Working knowledge of SQL, REST APIs and enterprise integration troubleshooting. * Relevant AWS, Azure, DevSecOps or advanced security certifications are advantageous. **Technology Stack** * Cloud platforms: AWS, Microsoft Azure * AWS services: ECS, Fargate, EC2, RDS, S3, IAM, CloudWatch, cloud networking * CI/CD: Azure DevOps, GitHub Actions, Jenkins, GitLab CI/CD * Infrastructure as Code: Terraform, AWS CloudFormation, Bicep or equivalent * Containers: Docker, container registries, image scanning and hardening * Operating systems: Linux administration, patching, shell scripting and log analysis * Scripting and automation: Python, Bash * Security: Vulnerability scanning, security testing, secrets management, encryption, IAM and compliance controls * Monitoring and observability: AWS CloudWatch, Azure Monitor and enterprise monitoring platforms * Version control: Git and collaborative development workflows * Databases and SQL: Amazon RDS, SQL querying, database access controls and connectivity troubleshooting * API and integration security: REST APIs, HTTP, JSON, authentication, certificates, Postman and curl **Skills** Action Planning, Application Development, Data Compilation, Data Management, Evaluating Information, Executing Plans, Information Technology (IT) Support, IT Network Security, Market Analysis, Product Development, Test Case Management **Competencies** Business Insight Courage Cultivates Innovation Customer Focus Decision Quality Drives Results Ensures Accountability Manages Ambiguity **Education** NQF Level 7 \- Degree, Advance Diploma or Postgraduate Certificate or equivalent **Closing Date** 09 November 2026 , 23:59 ***The appointment will be made from the designated group in line with the Employment Equity Plan of Old Mutual South Africa and the specific business unit in question.*** ***The Old Mutual Story!***