Staff DevSecOps Engineer

The Platform Engineering team builds, secures and operates scalable infrastructure supporting cloud-managed SaaS products with on-premises components deployed at customer sites. As our Staff DevSecOps Engineer, you will provide the technical leadership for our software factory, defining how software is built, secured and released across the organisation.

Responsibilities

Define and evolve the software factory, including CI/CD platforms, release engineering, developer tooling, Infrastructure as Code, dependency management and software supply-chain security; Deliver secure-by-default engineering practices through automated security controls, policy enforcement, vulnerability management, compliance automation and AI-driven workflows; Mentor engineers, establish engineering standards and collaborate across technical teams to deliver scalable, secure and highly automated development platforms; Own the software-factory roadmap, CI/CD platform, release engineering, Infrastructure as Code, internal developer platform and software supply-chain security; Embed security throughout the delivery pipeline through automated scanning, policy enforcement, vulnerability management, secrets management and continuous compliance; Develop agentic automation for pipeline operations, dependency management, release processes and operational support, while providing technical leadership, mentoring and engineering governance

Requirements

8+ years of production engineering experience with recent hands-on responsibility for enterprise-scale CI/CD platforms, Infrastructure as Code and production automation; Proven experience embedding security into software delivery through automated scanning, policy enforcement, vulnerability management and measurable operational improvements; Strong scripting and automation skills, with a demonstrated ability to simplify complex operational processes through reusable tooling and automation

Nice to have

Proven expertise in software supply-chain security, including artefact signing, Software Bills of Materials (SBOMs), provenance and SLSA principles; Experience designing internal developer platforms, self-service engineering capabilities and release management processes, including expedited production releases; Hands-on experience with agentic automation, AI or LLM security, and intelligent workflow orchestration within modern DevSecOps environments

Benefits

Comprehensive medical, dental, and vision plans; Matching 401(k); Unlimited PTO and paid holidays; Parental/adoption leave; Legal insurance; Home technology stipend