DevSecOps Engineer

Entersekt, a prominent South African firm specialising in digital banking fraud prevention and payment security, is looking for a skilled DevSecOps Engineer. With over 16 years in the industry and recent investment from Accel-KKR, Entersekt is at the forefront of mobile authentication, app security, and 3D Secure authentication solutions for various financial institutions. This fully remote role offers an opportunity to contribute to a secure and scalable cloud infrastructure, ensuring compliance with global security standards.

About the role

This position is integral to maintaining the security, scalability, and compliance of Entersekt's platform. The DevSecOps Engineer will primarily focus on the operational aspects, security, and monitoring of production services. A key objective is to embed security controls seamlessly into the development and operations pipelines. This involves a keen understanding of cloud infrastructure management, particularly within the Amazon Web Services (AWS) ecosystem, with an emphasis on data encryption, stringent access controls, and overall service reliability. The role also includes an on-call component to address immediate operational incidents.

The successful candidate will be responsible for a range of critical activities that ensure the robustness and security of Entersekt's systems. Your tasks will include:

• Managing core AWS services such as EKS, RDS, S3, and Lambda, prioritising encryption, least-privilege access, and reliability.
• Developing and refining strategies for monitoring system health and security events, utilising tools like OpenSearch, Prometheus, and Grafana.
• Ensuring all AWS environments adhere to relevant security standards, including SOC2 and PCI-DSS, implementing and monitoring "Policy as Code" using Terraform for automated auditing.
• Maintaining configurations for automation tools, securing deployments, and executing vulnerability scans.
• Collaborating with software engineering teams to ensure successful, secure, and compliant application deployments.
• Providing technical mentorship and guidance on secure infrastructure practices to other engineers across the organisation.

What they're looking for

Entersekt is searching for an experienced professional with a strong background in DevSecOps, SRE, or Cloud Engineering, ideally within a fintech or highly regulated environment. Key qualifications include:

• At least five years of experience in a relevant role.
• Profound expertise in AWS, specifically with services like IAM, EKS, VPC, S3, RDS, and EC2.
• A solid grasp of networking fundamentals including TCP/IP, DNS, and firewalls, as well as security tools such as WAF, KMS, and Shield.
• Extensive practical knowledge of Docker and Kubernetes (EKS), encompassing administration and deployment via Helm.
• Proficiency in Terraform for managing intricate cloud environments and implementing infrastructure as code.
• Experience in securing and optimising databases like PostgreSQL, MySQL, or MariaDB.
• Familiarity with CI/CD tools such as GitLab CI, ArgoCD, or Atlantis.
• Competence in scripting languages like Python or Bash for automation purposes.

This role represents an excellent opportunity for a seasoned engineer to join a leading South African tech company operating on a global scale. DevSecOps roles in South Africa typically attract competitive salaries, ranging from R700,000 to over R1,200,000 per annum, depending on experience and the complexity of the systems managed. Professionals in this field often find career progression towards architect-level roles, lead engineer positions, or specialised security consultancy roles, particularly in industries with high security and compliance demands like finance and telecommunications.

• 5 years+ in a DevSecOps, SRE, or Cloud Engineering role, preferably in fintech or a highly regulated environment.
• Deep expertise in AWS (specifically IAM, EKS, VPC, S3, RDS, and EC2).
• Strong understanding of TCP/IP, DNS, firewalls, and security tools (e.g., WAF, KMS, Shield).
• Extensive experience with Docker and Kubernetes (EKS), including administration and deployment via Helm.
• Proficiency in Terraform for managing complex cloud environments.
• Experience securing and tuning PostgreSQL, MySQL, or MariaDB.
• Experience with GitLab CI, ArgoCD, or Atlantis.
• Proficiency in Python or Bash for automation tasks.