Job Overview
We are seeking an experienced DevSecOps Engineer to join our team in Adelaide, Australia. The successful candidate will have a strong background in security and operations, with expertise in designing, building, and maintaining secure CI/CD pipelines.
The ideal candidate will be able to work across cross-functional teams to embed security into the development lifecycle, leveraging modern DevOps and infrastructure-as-code practices to support nationally significant outcomes.
Key Responsibilities
* Design, build, and maintain secure CI/CD pipelines using tools such as Jenkins and GitLab CI.
* Implement and manage containerised solutions using Docker and Kubernetes.
* Automate infrastructure deployment and configuration management with Terraform, Ansible, and scripting languages such as Python and Bash.
* Integrate security tooling and practices across the SDLC, including tools like SonarQube, Grype, and JFrog Xray.
* Monitor system health and performance using observability tools such as Prometheus, Grafana, and the Elastic Stack (ELK).
* Apply security best practices in line with the ASD Essential Eight and the Information Security Manual (ISM).
* Support administration and secure configuration of databases such as PostgreSQL, Microsoft SQL Server, Oracle, and MongoDB.
* Collaborate with software engineers, security analysts, and infrastructure teams to proactively manage risks and develop mitigation strategies.
* Document processes, configurations, and security controls; clearly communicate complex technical information to diverse stakeholders.
Required Skills and Qualifications
* Security Clearance: NV1 or NV2 (or the ability to obtain)
* Strong hands-on experience with CI/CD tools - Jenkins, GitLab CI
* Solid understanding of containerisation (Docker, Kubernetes) and container security
* Proficiency with scripting languages (Python, Bash) and IaC tools (Terraform, Ansible)
* Experience working in Linux/Unix environments with solid networking and OS-level security understanding
* Familiarity with security tooling such as SonarQube, Grype, JFrog Xray
* Understanding of observability and monitoring tools - Prometheus, Grafana, ELK Stack
* Knowledge of ASD Essential Eight, ISM controls, and secure software development practices