DevSecOps Engineer - #1174630

Responsibilities

• Develop automation and processes to enable application teams to deploy, manage, scale and monitor their applications on the case management application platform (built on OutSystems)

• Take ownership of platform-level solutions, and coordinate with the infrastructure team on hosting, network and infrastructure issues

• Manage platform configuration, including user and role management, access control, integration endpoints (e.g. APIs, SSO) and platform settings

• Own the CI/CD pipelines and release management process for applications hosted on the case management platform, including deployment plans, versioning and rollback, and approve production release readiness

• Implement platform and application observability (metrics, logs, traces) with defined SLIs/SLOs, dashboards and alert tuning, and report availability and performance against service levels

• Deploy and manage platform and application monitoring for performance, availability, errors and usage, and identify bottlenecks to maximise service availability

• Conduct performance and load testing, capacity planning and performance tuning with application teams to keep the case management platform responsive under enterprise workloads

• Lead system troubleshooting and problem solving across platform and application domains, run incident and problem management including root cause analysis and post-incident reviews, and lead on-call escalations for customer facing issues

• Support business continuity at the platform level, including application backup, restore and disaster recovery testing, in coordination with the infrastructure team

• Track and report OutSystems licence utilisation (e.g. application objects, users, environments) to support central governance and license cost optimisation

• Implement and maintain platform and application security controls, such as secure configuration, secrets management and access policies

• Perform threat and risk assessments at the platform and application level, and apply secure configuration profiles

• Employ best practices when implementing security controls within the platform and applications

• Implement security practices that comply with standards (e.g. IM8) to protect the organisation’s data and applications

• Maintain security and compliance evidence for ICT&SS / IM8 and the System Security Plan (SSP), such as configuration baselines, access reviews, scan results and change records

• Extend CI/CD pipelines and environment controls to promote agentic AI components (e.g. agent configurations, prompts, guardrail settings) consistently with the same approvals, scanning and rollback as application releases

• Provide technical guidance and peer review to other DevSecOps engineers and relevant application teams

Experience and Skills Needed

• Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines.

• At least 4 years of experience relevant to DevSecOps engineering, preferably at the application platform level

• Experience operating the OutSystems platform (O11 or OutSystems Developer Cloud), including LifeTime deployment, environment management and platform monitoring

• Passion for automation, standardisation and best practices

• Excellent understanding of Software Development Life Cycle, Test Driven Development, Continuous Integration and Continuous Delivery

• Experience supporting high availability, high performance and high security applications in cloud and hybrid environments

• Demonstrable skills in scripting languages such as Bash, PowerShell or Python

• Experience with version control systems such as Git

• Experience with cloud platforms such as GCC (e.g. AWS, Azure, Google Cloud)

• Ability to troubleshoot complex issues ranging from platform configuration to application stack traces

• Experience with application performance monitoring and logging tools (e.g. OutSystems monitoring, Elastic, Grafana, CloudWatch)

• Knowledge of application security testing tools (e.g. HP Fortify, SonarQube, Sonatype Nexus IQ) and secure coding practices

• Knowledge of platform-level backup, restore and disaster recovery

• Knowledge of container technologies such as Docker, Kubernetes

• Experience with DevOps toolset like GitLab, JIRA, BitBucket, Confluence

• Working knowledge of Government ICT&SS management policies (IM8) and SSP requirements, and has applied them to security controls, monitoring and release processes

• Experience with observability practices (SLIs/SLOs, distributed tracing, alert design, e.g. OpenTelemetry) and performance testing tools (e.g. JMeter, k6)

• Comfortable with Agile methodologies and working closely with product development teams

• Strong on collaboration and communication including documentation

Added Advantage

• OutSystems certifications

• Experience with security assessments pertaining to government projects

• Worked for an organisation which succeeded DevSecOps transformation

• Basic understanding of network infrastructure and Linux, to work effectively with the infrastructure team