Applied Cloud Computing - DevSecOps Engineer

Job Title: DevSecOps Engineer

Job Summary

We are seeking a highly skilled DevSecOps Engineer to embed security across the DevOps lifecycle in multi-cloud environments (AWS, Azure, OCI). The ideal candidate will have strong hands-on experience with Infrastructure as Code, Policy as Code, cloud security controls, and serverless development, ensuring secure, compliant, and scalable cloud platforms.

Key Responsibilities

• Integrate security into CI/CD pipelines across multi-cloud environments
• Design, develop, and maintain Infrastructure as Code (IaC) using Terraform and CloudFormation
• Implement Policy as Code and governance controls across AWS, Azure, and OCI
• Write and manage cloud security policies including:
  • AWS IAM Policies, SCPs, Resource Policies
  • Azure RBAC, Azure Policies, Blueprints
  • OCI IAM Policies and Compartments
• Develop and maintain serverless functions:
  • AWS Lambda
  • Azure Functions
  • OCI Functions
• Automate security controls, compliance checks, and remediation workflows
• Integrate security tools (SAST, DAST, SCA, container and IaC scanning) into pipelines
• Monitor cloud environments for security risks and vulnerabilities
• Collaborate with DevOps, Cloud, and Security teams to design secure architectures
• Support compliance with industry standards and regulatory requirements

Required Skills & Qualifications

• Strong hands-on experience with Terraform (multi-cloud)
• Experience with AWS CloudFormation, Azure ARM/Bicep (preferred)
• Proven experience writing cloud security policies and governance controls
• Experience with Policy as Code (OPA, Sentinel, Azure Policy, AWS Config, OCI Security Zones)
• Hands-on development of serverless functions (Python / Node.js preferred)
• Solid understanding of cloud security principles across AWS, Azure, and OCI
• Knowledge of CI/CD tools (Jenkins, GitHub Actions, GitLab CI, Azure DevOps)
• Experience with containers and orchestration (Docker, Kubernetes)
• Strong scripting skills (Python, Bash, etc.)
• Knowledge of OWASP Top 10 and secure coding practices

Preferred Qualifications

• Experience with cloud governance frameworks and landing zones
• Familiarity with AWS Control Tower, Azure Landing Zones, OCI Landing Zone
• Experience with compliance standards (ISO 27001, SOC 2, PCI-DSS)
• Cloud and security certifications (AWS, Azure, OCI, Kubernetes, CKS)

Soft Skills

• Strong policy documentation and technical writing skills
• Ability to automate security at scale across multiple cloud platforms
• Excellent communication and collaboration skills