Back to jobs

DevSecOps Engineer (IGT1)

Ultimo
Port City, Western Province, Sri Lanka
Full-time
You apply on Ultimo's own careers site

Own day-to-day infrastructure operations and security for the Kyriba SaaS platform, which supports a 24/7 global business. The role also develops automation and monitoring tools and maintains cloud security, certificate management, and compliance controls.

Permanent
Hybrid
3+ years
Degree in Computer Science, Cybersecurity, Software Engineer

Skills & Expertise

AWS
Azure
GCP
Terraform
CloudFormation
CI/CD
DNS
SSL/TLS

Key Responsibilities

Operate and support the SaaS platform infrastructure across regions and time zones.

Build automation, monitoring, deployment, and testing tools for infrastructure operations.

Maintain cloud security controls, certificate lifecycle automation, and regulatory compliance evidence.

Full Description

Job Description

• Fully own the day-to-day infrastructure support and operations of the Kyriba SaaS platform - we run our business 24x7x365 across multiple locations, time zones and languages

• Create internal automation, monitoring, deployment and testing tools

• Participate in continuous improvement of the existing process, methodologies, technologies and practices

• Effectively work with team members across multiple geographies

• Orchestration and deployment of virtualized infrastructure and services in a public cloud environment using Infrastructure as code

• Implement and maintain certificate lifecycle management and automation

• Maintain cloud security posture including IAM, network security, and compliance guardrails

• Manage global DNS infrastructure

• Support regulatory compliance (SOC 1 & 2, ISO 27001, SWIFT, etc)

• Automate and maintain documentation, evidence, and security controls required for compliance certifications

Qualifications

• Degree in Computer Science, Cybersecurity, Software Engineering or related discipline

• At least 3+ years of solid track record of working on a DevSecOps, Cloud Security, or Systems Engineering team

• Hands-on experience with cloud platforms (AWS, Azure, GCP) with a focus on IAM, networking, security boundaries, and managed services.

• Strong background in network security, DNS, firewalls (handling FCRs), and SSL/TLS certificate lifecycle automation.

• Experience with Infrastructure-as-Code (Terraform, CloudFormation) and Policy-as-Code paradigms.

• Experience implementing technical controls for regulatory frameworks (SOC 1 & 2, ISO 27001, SWIFT).

• Familiarity with CI/CD pipeline automation and integrating security tools (SAST/DAST/SCA) into software delivery lifecycles.

• Ability to work effectively across multiple geographies and time zones.

• Effective communication skills in English, both verbal and written.

Additional Information

We champion flexibility and hybrid work options to support varying lifestyles and personal needs. At the same time, we value the power of in-person collaboration to build community, spark innovation, and strengthen connections. Our approach ensures you can work in ways that suit you best while still engaging with colleagues to share ideas and grow together. #LI-Hybrid #LI-DNP

Applications are handled on Ultimo's site