M09 - DevSecOps Engineer

Role Overview

We are looking for a DevSecOps Engineer to support the development, deployment, security, and ongoing operations of an enterprise case management application platform built on OutSystems.

The successful candidate will be responsible for managing application environments, implementing CI/CD pipelines, maintaining platform security, monitoring system performance, and ensuring reliable application delivery.

You will work closely with solution architects, infrastructure teams, application developers, and security stakeholders to maintain a secure, scalable, and highly available application platform.

Key Responsibilities

• Manage and maintain OutSystems environments across development, testing, UAT, staging, and production.
• Configure and manage OutSystems platform components, including LifeTime, Service Center, user access, role management, and integration endpoints.
• Develop, implement, and maintain CI/CD pipelines to automate application deployment, version control, release management, and rollback procedures.
• Perform application deployments, including dependency checks, impact assessments, change approvals, and post-deployment verification.
• Implement and maintain platform security controls, including secure configurations, secrets management, access policies, and vulnerability assessments.
• Integrate security testing tools into CI/CD pipelines to identify vulnerabilities and support remediation activities.
• Monitor application and platform performance, availability, errors, and usage through monitoring dashboards, logging, and alerting tools.
• Implement observability practices, including metrics, logs, distributed tracing, SLIs/SLOs, and alert management.
• Conduct performance testing, load testing, capacity planning, and performance optimisation to ensure platform stability.
• Troubleshoot application and platform issues, perform root cause analysis, and support incident and problem management.
• Support backup, restoration, business continuity, and disaster recovery testing.
• Coordinate with infrastructure teams to resolve hosting, networking, and cloud-related issues.
• Maintain security and compliance documentation, including configuration baselines, access reviews, vulnerability scan results, and change records.
• Support compliance with relevant ICT security policies, including IM8 and System Security Plan (SSP) requirements.
• Track and report OutSystems licence utilisation to support platform governance and cost optimisation.
• Support the deployment and management of AI-related components, including agent configurations, prompts, and security guardrails, through established CI/CD processes.
• Collaborate with application development teams to improve automation, deployment efficiency, platform reliability, and security practices.
• Participate in incident response, technical troubleshooting, and on-call support when required.
• Provide technical guidance, documentation, and knowledge sharing to development and engineering teams.

Requirements

• Diploma or Degree in Computer Science, Computer Engineering, Information Technology, Electronics Engineering, or a related discipline.
• Minimum 2 years of relevant experience in DevSecOps, DevOps, application platform engineering, or a related technical role.
• Candidates with 4 or more years of relevant experience may be considered for senior-level responsibilities.
• Hands-on experience with OutSystems (O11 or OutSystems Developer Cloud), including LifeTime deployment and environment management.
• Good understanding of the Software Development Life Cycle (SDLC), Continuous Integration, and Continuous Delivery.
• Experience implementing and maintaining CI/CD pipelines and automated deployment processes.
• Proficiency in scripting languages such as Bash, PowerShell, or Python.
• Experience using version control systems such as Git.
• Familiarity with cloud platforms such as AWS, Microsoft Azure, or Google Cloud.
• Experience with application monitoring and logging tools such as OutSystems Monitoring, Elastic, Grafana, or Amazon CloudWatch.
• Knowledge of application security testing tools such as SonarQube, HP Fortify, or Sonatype Nexus IQ.
• Understanding of secure coding practices, vulnerability management, and application security controls.
• Familiarity with container technologies such as Docker and Kubernetes.
• Experience with DevOps tools such as GitLab, Jira, Bitbucket, or Confluence.
• Knowledge of application performance monitoring, troubleshooting, and incident management.
• Basic understanding of government ICT security requirements, including IM8 and SSP.
• Familiarity with observability concepts, including metrics, logs, tracing, and alerting.
• Comfortable working in Agile development environments and collaborating with cross-functional teams.
• Strong analytical, troubleshooting, communication, and documentation skills.

Added Advantages

• OutSystems certifications.
• Experience supporting enterprise-scale or government-related application platforms.
• Experience with Government Commercial Cloud (GCC).
• Familiarity with security assessments and compliance requirements for government projects.
• Experience implementing DevSecOps transformation initiatives.
• Knowledge of Linux administration and network infrastructure.
• Experience with performance testing tools such as JMeter or k6.
• Experience implementing observability solutions using OpenTelemetry.
• Familiarity with application backup, restoration, and disaster recovery.
• Exposure to AI platforms, agentic AI components, or AI-related deployment pipelines.

Originally posted on Himalayas