DevSecOps Engineer

G MASS • New York, NY

3h • Hybrid

About The Position

G MASS Consulting are seeking two experienced DevSecOps Engineers to support a strategic security-by-design initiative across an Investment Bank's global engineering platforms.
These roles sit within a regulated investment banking environment and focus on embedding security controls directly into CI/CD and cloud delivery pipelines.
This role suits a hands-on DevSecOps Engineer who has worked at scale, understands regulated delivery environments and is comfortable balancing velocity with security and control. It is not a pure platform or advisory security role - delivery ownership is key.

Requirements

• Enterprise CI/CD engineering (Jenkins and/or GitHub Actions)
• Secure pipeline design, secrets management and controlled release workflows
• Integration of security tooling such as SAST and code quality scanners (e.g. SonarQube, Fortify or equivalents)
• Strong AWS experience, including IAM (roles, policies, least-privilege), VPC fundamentals, EC2, S3, CloudWatch
• Infrastructure as Code using Terraform or CloudFormation
• Automation and scripting using Bash and Python (Groovy advantageous)

Nice To Haves

• Containerisation and orchestration (Docker, Kubernetes, EKS)
• OpenShift, Helm or enterprise container platforms
• Spanish speaking

Responsibilities

• Design, build and maintain secure, enterprise-grade CI/CD pipelines
• Embed automated security scanning, compliance checks, and vulnerability management into delivery workflows
• Automate infrastructure provisioning and application deployment using DevSecOps and IaC tooling
• Support and enhance containerised and cloud environments with a strong security-first mindset
• Partner closely with engineering, security, and platform teams to enforce secure delivery standards

What This Job Offers

• Career Level: Mid Level
• Education Level: No Education Listed