DevSecOps Engineer

As the first Senior DevSecOps Engineer, you will own the security-centric direction of our DevOps program within a regulated fintech context. You’ll integrate security and compliance into continuous delivery, collaborate with engineering and cross-functional stakeholders, and shape tooling choices and infrastructure strategy. You will drive AWS cost optimisation and design scalable, compliant infrastructure, balancing speed with governance. This is a high-impact, start-up–style role in a mature, growth-oriented environment where your decisions influence the company’s technical trajectory and risk posture.

• Own the technical direction of DevSecOps, including tooling decisions and architecture
• Integrate security and compliance into the DevOps lifecycle to ensure uptime and governance
• Collaborate with engineering and stakeholders, potentially in client-facing interactions
• Lead discussions on AWS cost optimisation and infrastructure strategy in a regulated environment
• Build and manage infrastructure for serverless and container-based workloads (Lambdas, Docker, RDS, Aurora Serverless, Kafka)
• Develop and maintain CI/CD pipelines with Jenkins, ensuring secure deployments
• Implement cloud security practices, including data encryption and preventing data leakage
• Create and maintain SOPs for compliance and operational efficiency
• Manage infrastructure with Terraform (and possibly Terragrunt)
• Monitor systems with Datadog and handle incident response with PagerDuty
• Oversee endpoint detection with Google Workspace and JumpCloud in lean IT environments
• Contribute to GCP management/backups policies with S3-based backups
• Manage access controls using 1Password in collaboration with HR
• Automate processes with GitHub Actions

• Senior-level DevSecOps experience in similar roles
• Proficiency in AWS with well-architected, shared VPCs, and best practices
• Strong automation skills with Terraform (Terragrunt a plus)
• Solid understanding of compliance/governance (ISO27001 and FCA exposure a bonus)
• Experience with serverless architectures and CI/CD tooling (Jenkins)
• Security-focused mindset with encryption and data-leak prevention experience
• Experience with monitoring and incident management tools (Datadog, PagerDuty)
• Knowledge of GitHub Actions for automation
• Familiarity with Google Workspace and JumpCloud for endpoint management
• Experience with GCP management/backups and S3 storage for backups
• Ability to own and communicate complex technical decisions to cross-functional teams

• Collaborative mindset
• Strong communication and stakeholder engagement
• Ownership and decision-making autonomy
• AWS (well-architected, shared VPCs)
• Terraform (Terragrunt)
• Jenkins CI/CD