DevSecOps Manager

About the role

This senior role drives secure, automated, and compliant cloud‑native delivery while managing monitoring/alerting, penetration testing programs, vulnerability management, and broader cybersecurity initiatives. You will lead a team of DevSecOps engineers, foster a “security by design” culture, and enable the business to innovate rapidly in a regulated South African and global context.

Key responsibilities

• Provision and manage cloud infrastructure as code (Terraform, Ansible, CloudFormation) on AWS, Azure or GCP.
• Design, implement and govern secure AWS architectures using multi‑account landing zones, VPCs, EKS, Lambda and related services.
• Build and evolve secure CI/CD pipelines (AWS CodePipeline, GitLab) with automated security gates (SAST, DAST, SCA, IaC, secret and container scanning).
• Architect comprehensive monitoring and alerting using CloudWatch, GuardDuty, X‑Ray and SIEM integrations, ensuring 24/7 visibility.
• Lead penetration testing programs, vulnerability management, threat modelling and incident response to meet POPIA compliance.
• Mentor and develop a high‑performing team of DevOps, SRE and security engineers, promoting a culture of automation and shared ownership.

Required profile

• Bachelor’s degree in Computer Science, IT, Cybersecurity or Engineering.
• 8–10+ years of experience in DevOps, Cloud Engineering or Cybersecurity, with 3–5+ years in technical leadership.
• Proven hands‑on experience with AWS in regulated environments (POPIA/GDPR).
• Relevant certifications such as AWS Certified Security – Specialty, AWS Certified DevOps Engineer – Professional, CISSP, CISM, CCSP or CISA.

Required skills

• AWS (Control Tower, IAM, KMS, GuardDuty, Security Hub, etc.)
• Infrastructure as Code tools: Terraform, CloudFormation, CDK, Ansible
• Container technologies: Docker, Kubernetes, Helm
• CI/CD platforms: AWS CodePipeline, GitLab
• Scripting languages: Python, Bash, PowerShell
• Security testing tools: Amazon Inspector, SonarQube, SAST/DAST, SCA, secret scanning
• Linux administration, networking fundamentals, Git version control
• Monitoring and observability: CloudWatch, X‑Ray, EventBridge, SIEM integration