Senior DevSecOps Engineer

Senior DevSecOps Engineer needed to own the security, infrastructure and operational foundations for a next‑gen, regulated fintech platform. You will act as the technical authority across cloud operations, platform security and compliance readiness, guiding production readiness and audit readiness. The role partners with engineering leadership to create secure, observable, and scalable systems from the ground up, with strong ownership and impact. You will drive security initiatives, CI/CD evolution, and disaster recovery while aligning with regulated standards. This is a high‑impact opportunity to shape secure production environments at scale.

• Own infrastructure, platform security, and operational readiness across the business
• Design and implement secure cloud environments and production-grade infrastructure
• Lead security initiatives including vulnerability management, threat modelling, penetration testing, and incident response planning
• Build and evolve CI/CD pipelines, release management processes, and deployment automation
• Establish observability, monitoring, logging, alerting, and operational runbooks
• Manage secrets, key custody, access controls, and infrastructure governance
• Deliver backup, disaster recovery, and business continuity strategies
• Drive compliance readiness for SOC 2, ISO 27001, and regulatory audits
• Partner with software engineering teams to ensure applications are secure, observable, and production-ready
• Lead infrastructure migration and cloud hardening initiatives

• 6+ years of engineering experience with at least 3 years focused on infrastructure, DevSecOps, platform engineering, or security
• Proven experience operating within highly regulated environments such as fintech, banking, payments, financial services, healthcare, defence, or similar sectors
• Experience taking systems from early-stage development through to secure production deployment
• Strong background in cloud infrastructure, automation, and operational security
• Experience supporting or leading SOC 2 Type II and/or ISO 27001 programmes
• Strong documentation and communication skills with the ability to create clear technical and compliance-focused artefacts
• Comfortable acting as the subject matter expert across security, infrastructure, and operational best practices

• strong communication
• collaboration
• attention to detail
• Terraform and Infrastructure-as-Code environments
• Kubernetes, Docker, and containerised application deployment
• Modern CI/CD platforms including GitHub Actions, Cloud Build, Buildkite, CircleCI, or similar