DevSecOps Engineer

Let's Write Africa's Story Together!

Old Mutual is a firm believer in the African opportunity and our diverse talent reflects this.

Job Description

As a DevSecOps Engineer, you will play a key role in the integration of security practices into our DevOps processes, ensuring the highest level of security across the software development lifecycle. This role is suited for a seasoned professional with deep expertise in DevOps, security, and automation. You will provide mentorship to team members and collaborate with various stakeholders to enhance the organization's security posture.

Group Technology & Data | MDM

Description

• Security Automation Leadership: Play s key role in the development and optimization of security automation scripts and tools within CI/CD pipelines. Champion the implementation of advanced automated security testing processes.

• Vulnerability Management and Remediation: Oversee and manage vulnerability scanning and assessment processes, ensuring swift identification and remediation of security vulnerabilities.

• Security Monitoring: Lead the design, implementation, and maintenance of comprehensive security monitoring solutions.

• Incident Response: Drive incident response efforts, analyze security events, and contribute to continuous improvement of response capabilities.

• Infrastructure as Code (IaC) Excellence: Enforce security best practices in Infrastructure as Code (IaC) scripts. Collaborate with DevOps teams to integrate advanced security measures into infrastructure provisioning.

• Secure Configuration Management: Implement secure configuration management practices for infrastructure components. Set and monitor secure configuration baselines in collaboration with operations teams.

• Security Governance and Compliance: Lead the establishment of security governance policies and compliance standards.

• Collaboration and Mentorship: Collaborate with cross-functional teams, providing guidance on security practices in DevOps processes. Mentor and coach junior and intermediate DevSecOps engineers.

• Qualifications and Experience

• Bachelor's degree in Computer Science, Information Security or a related discipline, or equivalent practical experience.

• 5+ years of relevant experience across DevOps, cloud engineering, cybersecurity or platform security.

• Proven experience leading DevSecOps initiatives and embedding security into enterprise delivery pipelines.

• Strong practical experience securing AWS and Azure cloud environments.

• Advanced understanding of CI/CD, Infrastructure as Code, container security and automated vulnerability management.

• Expert scripting and automation capabilities using Python and/or Bash.

• Strong knowledge of IAM, encryption, secrets management, secure configurations and security incident response.

• Experience with Linux, Docker, ECS/Fargate, cloud monitoring and production operations.

• Working knowledge of SQL, REST APIs and enterprise integration troubleshooting.

• Relevant AWS, Azure, DevSecOps or advanced security certifications are advantageous.

• Technology Stack

• Cloud platforms: AWS, Microsoft Azure

• AWS services: ECS, Fargate, EC2, RDS, S3, IAM, CloudWatch, cloud networking

• CI/CD: Azure DevOps, GitHub Actions, Jenkins, GitLab CI/CD

• Infrastructure as Code: Terraform, AWS CloudFormation, Bicep or equivalent

• Containers: Docker, container registries, image scanning and hardening

• Operating systems: Linux administration, patching, shell scripting and log analysis

• Scripting and automation: Python, Bash

• Security: Vulnerability scanning, security testing, secrets management, encryption, IAM and compliance controls

• Monitoring and observability: AWS CloudWatch, Azure Monitor and enterprise monitoring platforms

• Version control: Git and collaborative development workflows

• Databases and SQL: Amazon RDS, SQL querying, database access controls and connectivity troubleshooting

• API and integration security: REST APIs, HTTP, JSON, authentication, certificates, Postman and curl

• Skills

• Action Planning, Application Development, Data Compilation, Data Management, Evaluating Information, Executing Plans, Information Technology (IT) Support, IT Network Security, Market Analysis, Product Development, Test Case Management

• Competencies

• Business Insight

## Courage

## Cultivates Innovation

## Customer Focus

## Decision Quality

## Drives Results

## Ensures Accountability

## Manages Ambiguity

Education

• NQF Level 7 - Degree, Advance Diploma or Postgraduate Certificate or equivalent

• Closing Date

• 09 November 2026 , 23:59

• The appointment will be made from the designated group in line with the Employment Equity Plan of Old Mutual South Africa and the specific business unit in question.

• The Old Mutual Story!