DevSecOps Engineer

<p style="text-align:left"><span class="emphasis-2"><b>Let&#39;s Write Africa&#39;s Story Together!</b></span></p><p style="text-align:left"><span class="emphasis-2">Old Mutual is a firm believer in the African opportunity and our diverse talent reflects this. </span></p><p style="text-align:inherit"></p><p style="text-align:inherit"></p><p style="text-align:inherit"></p><p style="text-align:left"><b>Job Description</b></p><p style="text-align:inherit"></p><p style="text-align:inherit"></p>As a DevSecOps Engineer, you will play a key role in the integration of security practices into our DevOps processes, ensuring the highest level of security across the software development lifecycle. This role is suited for a seasoned professional with deep expertise in DevOps, security, and automation. You will provide mentorship to team members and collaborate with various stakeholders to enhance the organization's security posture.<br><br>Group Technology &amp; Data | MDM<p style="text-align:inherit"></p><p style="text-align:inherit"></p><h2>Description</h2><ul><li>Security Automation Leadership: Play s key role in the development and optimization of security automation scripts and tools within CI/CD pipelines. Champion the implementation of advanced automated security testing processes. </li><li>Vulnerability Management and Remediation: Oversee and manage vulnerability scanning and assessment processes, ensuring swift identification and remediation of security vulnerabilities. </li><li>Security Monitoring: Lead the design, implementation, and maintenance of comprehensive security monitoring solutions. </li><li>Incident Response: Drive incident response efforts, analyze security events, and contribute to continuous improvement of response capabilities. </li><li>Infrastructure as Code (IaC) Excellence: Enforce security best practices in Infrastructure as Code (IaC) scripts. Collaborate with DevOps teams to integrate advanced security measures into infrastructure provisioning. </li><li>Secure Configuration Management: Implement secure configuration management practices for infrastructure components. Set and monitor secure configuration baselines in collaboration with operations teams. </li><li>Security Governance and Compliance: Lead the establishment of security governance policies and compliance standards.  </li><li>Collaboration and Mentorship: Collaborate with cross-functional teams, providing guidance on security practices in DevOps processes. Mentor and coach junior and intermediate DevSecOps engineers. </li></ul><br /><p><b>Qualifications and Experience</b></p><ul><li>Bachelor&#39;s degree in Computer Science, Information Security or a related discipline, or equivalent practical experience.</li><li>5&#43; years of relevant experience across DevOps, cloud engineering, cybersecurity or platform security.</li><li>Proven experience leading DevSecOps initiatives and embedding security into enterprise delivery pipelines.</li><li>Strong practical experience securing AWS and Azure cloud environments.</li><li>Advanced understanding of CI/CD, Infrastructure as Code, container security and automated vulnerability management.</li><li>Expert scripting and automation capabilities using Python and/or Bash.</li><li>Strong knowledge of IAM, encryption, secrets management, secure configurations and security incident response.</li><li>Experience with Linux, Docker, ECS/Fargate, cloud monitoring and production operations.</li><li>Working knowledge of SQL, REST APIs and enterprise integration troubleshooting.</li><li>Relevant AWS, Azure, DevSecOps or advanced security certifications are advantageous.<br /><br /></li></ul><p><b>Technology Stack</b></p><ul><li><b>Cloud platforms:</b> AWS, Microsoft Azure</li><li><b>AWS services:</b> ECS, Fargate, EC2, RDS, S3, IAM, CloudWatch, cloud networking</li><li><b>CI/CD:</b> Azure DevOps, GitHub Actions, Jenkins, GitLab CI/CD</li><li><b>Infrastructure as Code:</b> Terraform, AWS CloudFormation, Bicep or equivalent</li><li><b>Containers:</b> Docker, container registries, image scanning and hardening</li><li><b>Operating systems:</b> Linux administration, patching, shell scripting and log analysis</li><li><b>Scripting and automation:</b> Python, Bash</li><li><b>Security:</b> Vulnerability scanning, security testing, secrets management, encryption, IAM and compliance controls</li><li><b>Monitoring and observability:</b> AWS CloudWatch, Azure Monitor and enterprise monitoring platforms</li><li><b>Version control:</b> Git and collaborative development workflows</li><li><b>Databases and SQL:</b> Amazon RDS, SQL querying, database access controls and connectivity troubleshooting</li><li><b>API and integration security:</b> REST APIs, HTTP, JSON, authentication, certificates, Postman and curl</li></ul><p><br /><br /></p><p> </p><p style="text-align:inherit"></p><p style="text-align:inherit"></p><p style="text-align:inherit"></p><p style="text-align:left"><b>Skills</b></p><p style="text-align:inherit"></p><p style="text-align:inherit"></p>Action Planning, Application Development, Data Compilation, Data Management, Evaluating Information, Executing Plans, Information Technology (IT) Support, IT Network Security, Market Analysis, Product Development, Test Case Management<p style="text-align:inherit"></p><p style="text-align:inherit"></p><p style="text-align:left"><b>Competencies</b></p><p style="text-align:inherit"></p><p style="text-align:inherit"></p>Business Insight<h3></h3><h3></h3>Courage<h3></h3><h3></h3>Cultivates Innovation<h3></h3><h3></h3>Customer Focus<h3></h3><h3></h3>Decision Quality<h3></h3><h3></h3>Drives Results<h3></h3><h3></h3>Ensures Accountability<h3></h3><h3></h3>Manages Ambiguity<p style="text-align:inherit"></p><p style="text-align:inherit"></p><p style="text-align:inherit"></p><p style="text-align:left"><b>Education</b></p><p style="text-align:inherit"></p><p style="text-align:inherit"></p>NQF Level 7 - Degree, Advance Diploma or Postgraduate Certificate or equivalent<p style="text-align:inherit"></p><p style="text-align:inherit"></p><p style="text-align:inherit"></p><p style="text-align:left"><b>Closing Date</b></p><p style="text-align:inherit"></p><p style="text-align:inherit"></p>09 November 2026 , 23:59<p style="text-align:inherit"></p><p style="text-align:inherit"></p><p><i><b>The appointment will be made from the designated group in line with the Employment Equity Plan of Old Mutual South Africa and the specific business unit in question.</b></i></p><p style="text-align:inherit"></p><p style="text-align:inherit"></p><p style="text-align:left"><i><span class="emphasis-2"><b>The Old Mutual Story!</b></span></i></p>