Application Engineer II-DevSecOps

DevSecOps Engineer  

Are you passionate about building secure, scalable cloud infrastructure? Join our innovative team and lead the DevSecOps function that powers our cutting-edge facultative reinsurance platform. This is your chance to make a significant impact on a global application while working with state-of-the-art technologies in an empowered agile environment. 

About the Role 

As our DevSecOps Engineer, you'll be the driving force behind our secure infrastructure and deployment practices, ensuring our innovative platform continues to deliver exceptional value to users worldwide. 

Key Responsibilities 

• Infrastructure Leadership - Plan and execute infrastructure improvements to guarantee stable feature rollouts in collaboration with feature Squads and architects 

• Release Management - Coordinate and manage the release process, working closely with feature and quality Squads 

• Problem Resolution - Provide hands-on contribution in analyzing and resolving system instabilities 

• Security Oversight - Take ownership of vulnerabilities and coordinate their timely resolution 

• DevSecOps Excellence - Form and maintain a high-quality DevSecOps function within our agile setup 

About the Team 

You'll be working with a sophisticated Azure Cloud-based application and Private Cloud PCF (Pivotal Cloud Foundry) that serves a worldwide user base and is highly integrated into the full value chain of our company, including core legacy services. Our platform must fulfill high security and compliance standards while leveraging state-of-the-art technology stacks. Our applications are written in Python, Java Spring Boot and .NET/C#, utilizing various Azure Cloud Services (e.g., AKS, Cosmos DB, PostgreSQL and ASB), with frontends developed in Angular/React. We operate in an agile environment where team empowerment is our highest value. 

We are looking for candidates who meet these requirements: 

• 7+ years of proven experience as a DevSecOps Engineer or in a similar role in software development. 

• Experience leading DevSecOps activities in agile environments, with strong knowledge of software testing methodologies, tools, and processes. 

• Hands-on experience in containerizing applications built on Python, Java, C#, Angular, and React, as well as solid knowledge of Cloudflare, Azure cloud services, Azure Secure Landing Zoner network architecture and security. 

• Excellent in writing the scripts in bash, PowerShell, YML/YAML. 

• Embed automated quality and approval gates into the build and release workflow. 

• Strong expertise in developing Infrastructure as Code solutions using Terraform for Azure Cloud Infrastructure and Private Cloud PCF (Pivotal Cloud Foundry).  

• Strong expertise in operational log analysis, with the ability to leverage Elasticsearch for monitoring, troubleshooting, and insights. 

• Excellent communication skills in English, both written and verbal. 

• Hands-on experience with containerization technologies (Docker, Kubernetes). 

• Experience implementing CI/CD pipelines. 

These are additional nice things to have: 

• Ability to leverage AI coding assistants such as GitHub Copilot, Claude, or Gemini to improve development productivity. 

• Ability to drive shift-left security across the SDLC. 

• Strong problem-solving skills during production incidents and vulnerability remediation. 

• Good understanding of cloud security, identity management, secrets management, and audit readiness. 

Our company has a hybrid work model where the expectation is that you will be in the office at least three days per week