Lead DevSecOps Engineer

Requirements:

• Leadership and Strategy: Proven experience leading/mentoring DevSecOps or Security Engineering teams, defining technical roadmap, and driving security architecture standards.
• Security Metrics and Executive Reporting: Ability to define key risk indicators (KRIs/KPIs), build operational dashboards, and translate technical security metrics into clear executive reports for senior stakeholders.
• Languages: Advanced Python (for designing complex automation frameworks, custom tooling, and security integrations).
• Cloud Architecture and IaC: Deep expertise in Azure and Terraform.
• CI/CD and GitOps: Advanced Azure DevOps pipeline architecture alongside GitOps implementations (FluxCD, Helm, or Kustomize).
• Container Security and Orchestration: Production-grade Kubernetes and Docker security architecture, image signing, and runtime defence.
• Stakeholder Management: Ability to bridge business risk and technical execution, collaborating with Dev, Sec, and Ops leads.

Nice-to-Have Skills (Secondary / Bonus):

• AppSec and Pipeline Security: Designing automated SAST/DAST/SCA governance and vulnerability management reporting workflows.
• Offensive Security and Hardening: Hands-on threat modelling, penetration testing background, and infrastructure attack-surface reduction.
• Secrets and Identity Architecture: Enterprise-wide secrets lifecycle management (e. g., Azure Key Vault, Vault, IAM governance).
• Network and Zero Trust Security: Designing cloud network segmentation and micro-segmentation natively within IaC.