DevSecOps Engineer – Cloud Security & CI/CD

About the role

Olmait is seeking a DevSecOps Engineer to embed security throughout its cloud infrastructure and software development lifecycle. The role supports a fast‑moving health‑tech platform that handles highly sensitive patient data, requiring strict compliance and rapid delivery.

Key responsibilities

• Design, implement and maintain security controls in CI/CD pipelines, ensuring security is built‑in from the start.
• Collaborate with engineering teams to integrate security into application development and GCP cloud infrastructure.
• Develop and automate tools for continuous monitoring, vulnerability scanning, incident response and risk management.
• Implement Infrastructure‑as‑Code (IaC) practices using Terraform/Helm to automate provisioning, security and monitoring.
• Stay current on emerging threats, compliance standards and guide teams on secure coding and threat modelling.

Required profile

• 3+ years of experience in a DevSecOps or similar security‑operations role.
• Strong problem‑solving abilities and capacity to work in a high‑growth startup environment.
• Excellent communication skills to explain security concepts to technical and non‑technical stakeholders.

Required skills

• Hands‑on experience with Google Cloud Platform (GCP).
• Proficiency with IaC tools such as Terraform and Helm.
• Experience with container orchestration (Kubernetes) and Helm charts.
• Knowledge of security frameworks (NIST, OWASP, CIS) and cloud‑native security best practices.
• Familiarity with CI/CD pipelines and security integration using GitHub Actions.
• Scripting/automation skills in Python, Bash or Node.js.