Mid-Level DevSecOps Engineer at Diamond Trust Bank (DTB)

Job Purpose :

Diamond Trust Bank is seeking a Mid-Level DevSecOps Engineer to join our team of innovators and engineers. This role reports directly to the Lead DevSecOps Engineer and works closely with Software Engineering, Quality Engineering, Architecture, Infosec and Data Science teams. The ideal candidate is an energetic self-starter with the ability to make independent strategic decisions.

As a Mid-level DevSecOps engineer you will be responsible for deployments, infrastructure as code and integrating security practices and processes into the software development lifecycle. You will work closely with development teams to ensure secure coding practices, vulnerability management and deployments.
Together, let's create meaningful solutions that make an impact in the digital world.

Key Responsibilities :

• Collaborate with development teams to integrate security practices and processes into the software development lifecycle.
• Create, maintain, and improve the core “Infrastructure As Code” that supports our development, UAT and production systems.
• Design and improve automation that will let us scale and evolve systems by improving reliability and velocity using Terraform, Helmfile, Flux, and Tekton
• Utilize Kubernetes (K8s) to manage containerized applications within the infrastructure, ensuring efficient deployment, scaling, and orchestration.
• Maintain and improve the core infrastructure by measuring and monitoring availability, latency, and overall system health.
• Practice sustainable incident response and blameless post-mortems.
• Troubleshoot and resolve incidents promptly to minimize downtime and impact.
• Track work related tasks at every development stage and keep the team aligned with all code changes.

Knowledge :

Academic :

• Bachelor’s degree in Computer Science, Software Engineering, or a related field involving coding (e.g., physics or mathematics).

Professional :

• 3 to 5 years of experience in DevSecOps and Infrastructure as Code.
• Strong understanding of secure coding practices.
• Expertise in container orchestration using Kubernetes.
• Experience with cloud provider APIs, best practices, and management (Azure and AWS)
• Experience with configuration tools Terraform, Helmfile, Flux, Tekton
• Experience with monitoring tools OpenTelemetry, Prometheus and Grafana
• Experience in one or more of the following: Java, Python, Go, React
• Knowledge of common vulnerabilities and ability to conduct vulnerability assessments.
• Experience with security testing tools and processes.
• Strong understanding of CI/CD practices, including in-pipeline Code Quality and Security assessments such as SonarQube, VeraCode and others.
• Knowledge of regulatory and compliance requirements (e.g., GDPR, HIPAA, PCI-DSS).

Personal Competencies :

• Ability to work collaboratively with cross-functional teams.
• Strong analytical and problem-solving skills.
• Attention to detail and commitment to security standards.
• Self-motivated with a proactive approach.
• Ability to prioritize and manage multiple tasks.
• Excellent communication and interpersonal skills.