DevSecOps Engineer
- G Mass
Job Description
G MASS Consulting are seeking two experienced DevSecOps Engineers to support a strategic security-by-design initiative across an Investment Bank's global engineering platforms.
These roles sit within a regulated investment banking environment and focus on embedding security controls directly into CI/CD and cloud delivery pipelines.
This role suits a hands-on DevSecOps Engineer who has worked at scale, understands regulated delivery environments and is comfortable balancing velocity with security and control. It is not a pure platform or advisory security role - delivery ownership is key.
Key Responsibilities
- Design, build and maintain secure, enterprise-grade CI/CD pipelines
- Embed automated security scanning, compliance checks, and vulnerability management into delivery workflows
- Automate infrastructure provisioning and application deployment using DevSecOps and IaC tooling
- Support and enhance containerised and cloud environments with a strong security-first mindset
- Partner closely with engineering, security, and platform teams to enforce secure delivery standards
Requirements
- Enterprise CI/CD engineering (Jenkins and/or GitHub Actions)
- Secure pipeline design, secrets management and controlled release workflows
- Integration of security tooling such as SAST and code quality scanners (e.g. SonarQube, Fortify or equivalents)
- Strong AWS experience, including IAM (roles, policies, least-privilege), VPC fundamentals, EC2, S3, CloudWatch
- Infrastructure as Code using Terraform or CloudFormation
- Automation and scripting using Bash and Python (Groovy advantageous)
Nice to have
- Containerisation and orchestration (Docker, Kubernetes, EKS)
- OpenShift, Helm or enterprise container platforms
- Spanish speaking
Benefits
12-month contract.
Paying up to a maximum of $415 (C2C) & $380 (W2) per day, depending on experience.
If based in New York, working on a hybrid basis.
Can also be worked remotely, but must adhere to EST.
