Senior Software Engineer

Experience

Role Overview

Key Responsibilities

• Design, implement, and manage secure CI/CD pipelines for application and platform delivery.
• Embed security controls and automated checks into the software development lifecycle using a DevSecOps approach.
• Build and maintain Infrastructure as Code (IaC) using tools such as Terraform, CloudFormation, or similar.
• Manage and optimize cloud-native infrastructure across platforms such as AWS, Azure, or GCP.
• Implement and maintain containerization and orchestration platforms such as Docker and Kubernetes.
• Integrate security tools into delivery pipelines, including:

• Software Composition Analysis (SCA)

• Container and infrastructure vulnerability scanning
• Secrets detection and policy enforcement
• Collaborate with development and security teams to remediate vulnerabilities and strengthen application security posture.
• Establish monitoring, logging, alerting, and observability standards for platforms and applications.
• Support incident response, root cause analysis, and continuous improvement of platform resilience and security.
• Drive DevSecOps best practices, standards, and governance across teams.
• Ensure compliance with internal security policies and external regulatory requirements where applicable.
• Mentor junior engineers and contribute to platform engineering and automation strategy.

Required Skills and Experience

• 6–9 years of overall experience in software engineering, infrastructure, DevOps, or platform engineering.
• Minimum 4+ years of hands-on experience in DevOps or DevSecOps.
• Strong experience with CI/CD tools such as Jenkins, GitHub Actions, GitLab CI, Azure DevOps, or Bamboo.
• Strong hands-on experience with Terraform, Ansible, or similar automation/IaC tools.
• Solid experience with cloud platforms such as AWS, Azure, or GCP.
• Good knowledge of containers and orchestration tools such as Docker and Kubernetes.
• Experience integrating security tooling into engineering pipelines.
• Strong understanding of secure coding, IAM, secrets management, vulnerability management, and cloud security principles.
• Experience with monitoring and observability tools such as Prometheus, Grafana, ELK, Datadog, Splunk, or Cloud-native tools.
• Good scripting skills in Python, Bash, PowerShell, or similar.
• Strong understanding of Linux systems, networking, and system administration concepts.
• Experience working in Agile delivery environments.

Preferred Qualifications

• Experience in regulated industries such as financial services, government, healthcare, or telecom.
• Familiarity with compliance standards such as ISO 27001, SOC 2, NIST, PCI-DSS, or similar.
• Knowledge of policy-as-code and security automation tools such as OPA, Sentinel, Checkov, Trivy, SonarQube, Snyk, Aqua, Prisma Cloud, or similar.
• Relevant certifications such as:
• AWS / Azure / GCP certifications

• Certified Kubernetes Administrator (CKA)

• Terraform Associate
• Security certifications such as CISSP, CCSP, or similar

Key Competencies

• Strong problem-solving and troubleshooting skills
• Strong collaboration and stakeholder management
• Ability to balance delivery speed with security and control
• Continuous improvement mindset
• Strong communication and documentation skills