DevSecOps Engineer

Job Overview

At Sahl, security is embedded in how we build and deploy software. As a DevSecOps Engineer, you’ll operate at the intersection of platform engineering and security, owning the security posture of our infrastructure, cloud environments, CI/CD pipelines, and automation workflows.

This role is ideal for someone who loves building scalable guardrails, not gates, and understands that secure systems are the foundation for fast and reliable product delivery.

Responsibilities

• Secure CI/CD pipelines (GitLab) with automated checks, controls, and deployment protections.

• Ensure infrastructure security across cloud services, container orchestration, storage, networking, and secrets management.

• Harden identity & access management, including role design, service accounts, and privilege boundaries.

• Continuously monitor and alert on cloud security events, misconfigurations, and drift.

• Collaborate with Platform Engineering to embed security into all environments.

• Build and maintain automation and tooling to reduce human error and enforce security standards at scale.

Qualifications:

• Experience securing cloud-native systems (AWS, GCP, Azure) and CI/CD pipelines.

• Strong understanding of container security, Infrastructure as Code (IaC), secrets management, and DevOps tooling.

• Ability to automate processes and enforce security standards efficiently.

• Proactive mindset: Identify and mitigate risks before they escalate into incidents.

• Comfortable collaborating with platform engineers, SREs, and cross-functional teams.