The DevSecOps Engineer will design and manage secure CI/CD pipelines for ecommerce platforms, integrate security controls in development, and ensure compliance with regulations while optimizing cloud environments.
Overview
Requirements
We are seeking an experienced DevSecOps Engineer with a strong background in ecommerce environments to help design, implement, and maintain secure, scalable, and highly available CI/CD pipelines and cloud infrastructure. This role will work closely with development, security, and operations teams to embed security throughout the software development lifecycle while supporting high-traffic, revenue-generating platforms.
The ideal candidate understands the unique challenges of ecommerce systems, including payment security, high availability, rapid release cycles, and regulatory compliance.
Key Responsibilities- Design, implement, and maintain secure CI/CD pipelines for ecommerce applications.
- Embed security controls and automated testing (SAST, DAST, SCA, IaC scanning) into the SDLC.
- Support cloud-based ecommerce platforms with a focus on scalability, availability, and performance.
- Implement and manage infrastructure as code (IaC) using tools such as Terraform, CloudFormation, or ARM.
- Collaborate with development teams to securely deploy and maintain ecommerce applications and APIs.
- Ensure secure handling of payment systems, customer data, and integrations with third-party vendors.
- Monitor, detect, and respond to security events within production and non-production environments.
- Implement and maintain secrets management, certificate management, and key rotation.
- Support compliance efforts related to PCI DSS, SOC 2, ISO 27001, or similar frameworks.
- Perform threat modeling and risk assessments for new ecommerce features and integrations.
- Improve system reliability through automation, monitoring, and incident response practices.
- Participate in on-call rotations and support production releases as needed.
Requirements
- 5+ years of experience in DevOps or DevSecOps roles.
- Hands-on experience supporting ecommerce platforms, including Swell, Shopify, Magento, BigCommerce, or custom ecommerce solutions.
- Integrate and manage Cloudflare services (WAF, CDN, DDoS protection, Zero Trust access, bot management) to protect and optimize ecommerce applications
- Strong experience with CI/CD tools (GitHub Actions, GitLab CI, Jenkins, Azure DevOps, etc.).
- Experience securing cloud environments (AWS, Azure, and/or GCP).
- Solid understanding of web application security and OWASP Top 10.
- Experience with containerization and orchestration (Docker, Kubernetes).
- Familiarity with SAST, DAST, and dependency scanning tools (e.g., Snyk, Checkmarx, Veracode).
- Strong scripting skills (Bash, Python, or similar).
- Experience with monitoring and logging tools (Prometheus, Grafana, ELK/Elastic, Datadog).
- Understanding of PCI DSS requirements and secure payment processing workflows.
Top Skills
Arm
AWS
Azure
Azure Devops
Bash
Checkmarx
Ci/Cd Pipelines
Cloudflare
CloudFormation
Dast
Datadog
Docker
Elk
GCP
Github Actions
Gitlab Ci
Grafana
Jenkins
Kubernetes
Prometheus
Python
Sast
Snyk
Terraform
Veracode
Similar Jobs
Information Technology • Consulting
The DevSecOps Engineer designs and maintains CI/CD pipelines, manages Docker and Kubernetes environments, integrates security controls and automated testing, and ensures compliance in cloud platforms.
Top Skills:
AWSCi/CdDockerGitlabIacKubernetesObservability StacksRmfSecurity AutomationStigsZero Trust
Artificial Intelligence • Big Data • Cloud • Cybersecurity • Defense
As a Senior DevSecOps Engineer, you'll lead the lifecycle management of applications, ensure security, implement CI/CD pipelines, and collaborate with clients on innovative solutions.
Top Skills:
AppgateAWSGitlabInfrastructure As CodeIstioPalo Alto Firewall
Blockchain • Fintech • Payments • Software • Financial Services • Cryptocurrency
Lead the DevSecOps for Optimum's decentralized infrastructure, managing security, reliability, and automation for production systems. Drive CI/CD processes and cross-functional collaboration to enhance system performance and safety.
Top Skills:
BashGithub ActionsGoHelmKubernetesPythonTerraform
What you need to know about the London Tech Scene
London isn't just a hub for established businesses; it's also a nursery for innovation. Boasting one of the most recognized fintech ecosystems in Europe, attracting billions in investments each year, London's success has made it a go-to destination for startups looking to make their mark. Top U.K. companies like Hoptin, Moneybox and Marshmallow have already made the city their base — yet fintech is just the beginning. From healthtech to renewable energy to cybersecurity and beyond, the city's startups are breaking new ground across a range of industries.
