DevSecOps Consultant

Overview

Support the implementation of the e-Comment project by enhancing CI/CD pipelines, build processes, and security practices aligned with DevSecOps standards.

Key Responsibilities

• Conduct technical assessment of CI/CD pipelines, build processes, tooling, infrastructure automation, and security practices.
• Identify areas for improvement aligned with best practice DevSecOps standards.
• Create or improve automated Azure DevOps pipelines for web and desktop applications.
• Establish pipeline templates and standards for scalable reuse.
• Enhance deployment reliability through rollback mechanisms, approvals, and reproducible build practices.
• Integrate automated security scanning, vulnerability management, license compliance checks, and secure build practices into pipelines.
• Containerize appropriate services and design deployment pipelines for cloud platforms.
• Implement automated workflows for building, packaging, code signing, and distributing desktop applications.
• Configure or improve infrastructure-as-code templates, monitoring, logging, and environment provisioning.
• Work closely with developers to define requirements, establish DevSecOps standards, and train teams.
• Produce clear, maintainable documentation covering DevOps workflows, security practices, pipelines, troubleshooting procedures, and operational guidelines.

Required Experience

• At least five (5) years of experience in the field relevant to the Special Service Agreement (SSA).
• Proven experience designing and automating CI/CD pipelines and deployment processes for web and/or desktop applications, primarily in Windows environments using Azure DevOps.
• Demonstrated hands-on experience with containerization and deploying applications to cloud environments, preferably Azure and/or AWS.
• Experience applying DevSecOps practices such as automated testing, code quality checks, and security scanning within CI/CD workflows.
• Hands-on experience automating desktop application build pipelines, including packaging, versioning, and code-signing of Windows executables in a CI/CD context.

Qualifications

Advanced university degree in systems engineering, information technology, computer science or a related field OR education from a reputed college of advanced education with a diploma of equivalent standard to that of an advanced university degree in one of the fields above.

Other Details