DevSecOps Engineer

G MASS Consulting are seeking two experienced DevSecOps Engineers to support a strategic security-by-design initiative across an Investment Bank's global engineering platforms.

These roles sit within a regulated investment banking environment and focus on embedding security controls directly into CI/CD and cloud delivery pipelines.

This role suits a hands-on DevSecOps Engineer who has worked at scale, understands regulated delivery environments and is comfortable balancing velocity with security and control. It is not a pure platform or advisory security role - delivery ownership is key.

Key Responsibilities

• Design, build and maintain secure, enterprise-grade CI/CD pipelines
• Embed automated security scanning, compliance checks, and vulnerability management into delivery workflows
• Automate infrastructure provisioning and application deployment using DevSecOps and IaC tooling
• Support and enhance containerised and cloud environments with a strong security-first mindset
• Partner closely with engineering, security, and platform teams to enforce secure delivery standards

Requirements

• Enterprise CI/CD engineering (Jenkins and/or GitHub Actions)
• Secure pipeline design, secrets management and controlled release workflows
• Integration of security tooling such as SAST and code quality scanners (e.g. SonarQube, Fortify or equivalents)
• Strong AWS experience, including IAM (roles, policies, least-privilege), VPC fundamentals, EC2, S3, CloudWatch
• Infrastructure as Code using Terraform or CloudFormation
• Automation and scripting using Bash and Python (Groovy advantageous)

Nice to have

• Containerisation and orchestration (Docker, Kubernetes, EKS)
• OpenShift, Helm or enterprise container platforms
• Spanish speaking

Benefits

12-month contract.

Paying up to a maximum of $415 (C2C) & $380 (W2) per day, depending on experience.

If based in New York, working on a hybrid basis.

Can also be worked remotely, but must adhere to EST.