Overview
The Azure DevSecOps Engineer will play a crucial role in enhancing the cloud security posture of a major financial services organisation. This position involves collaborating with various teams including Cloud, Security, Governance, and Development to integrate security principles within Azure environments and DevOps pipelines. The contractor will focus on implementing secure architectures and automated compliance strategies while acting as a subject matter expert in Azure Cloud Security and DevSecOps best practices.
Responsibilities
- Design and implement secure Azure cloud architectures aligned with approved security frameworks.
- Embed security controls directly into Azure DevOps CI/CD pipelines.
- Develop automated pipelines with integrated security scanning, testing, and validation.
- Drive adoption of Policy as Code and automated compliance approaches.
- Implement and validate cloud security controls across Azure environments.
- Integrate security tooling into deployment pipelines, including SAST, DAST, SCA, and secret scanning.
- Support continuous compliance monitoring and automated remediation strategies.
- Produce technical documentation, SOPs, and governance artefacts.
Requirements
- 5+ years’ hands-on experience in Cloud Security with a strong Microsoft Azure focus.
- Deep experience with Azure DevOps (Pipelines, Repos, Boards, and Artifacts).
- Strong CI/CD implementation experience with embedded security gates and controls.
- Expertise in Policy as Code and Infrastructure as Code approaches.
- Strong knowledge of Azure security tooling, including Defender for Cloud and Azure Sentinel.
- Understanding of Identity & Access Management concepts, including PIM and MFA.
- Expertise in Azure networking and security, including VNets, NSGs, and Firewalls.
- Experience with AKS and container security, and knowledge of compliance frameworks such as NIST and ISO 27001.