DevSecops Engineer
Maverc TechnologiesUnited Kingdom2 days ago
ContractInformation Technology
Track This Job
Add this job to your tracking list to:
- Monitor application status and updates
- Change status (Applied, Interview, Offer, etc.)
- Add personal notes and comments
- Set reminders for follow-ups
- Track your entire application journey
Save This Job
Add this job to your saved collection to:
- Access easily from your saved jobs dashboard
- Review job details later without searching again
- Compare with other saved opportunities
- Keep a collection of interesting positions
- Receive notifications about saved jobs before they expire
AI-Powered Job Summary
Get a concise overview of key job requirements, responsibilities, and qualifications in seconds.
Pro Tip: Use this feature to quickly decide if a job matches your skills before reading the full description.
Overview
We are seeking an experienced DevSecOps Engineer with a strong background in ecommerce environments to help design, implement, and maintain secure, scalable, and highly available CI/CD pipelines and cloud infrastructure. This role will work closely with development, security, and operations teams to embed security throughout the software development lifecycle while supporting high-traffic, revenue-generating platforms.
The ideal candidate understands the unique challenges of ecommerce systems, including payment security, high availability, rapid release cycles, and regulatory compliance.
Key Responsibilities
We are seeking an experienced DevSecOps Engineer with a strong background in ecommerce environments to help design, implement, and maintain secure, scalable, and highly available CI/CD pipelines and cloud infrastructure. This role will work closely with development, security, and operations teams to embed security throughout the software development lifecycle while supporting high-traffic, revenue-generating platforms.
The ideal candidate understands the unique challenges of ecommerce systems, including payment security, high availability, rapid release cycles, and regulatory compliance.
Key Responsibilities
- Design, implement, and maintain secure CI/CD pipelines for ecommerce applications.
- Embed security controls and automated testing (SAST, DAST, SCA, IaC scanning) into the SDLC.
- Support cloud-based ecommerce platforms with a focus on scalability, availability, and performance.
- Implement and manage infrastructure as code (IaC) using tools such as Terraform, CloudFormation, or ARM.
- Collaborate with development teams to securely deploy and maintain ecommerce applications and APIs.
- Ensure secure handling of payment systems, customer data, and integrations with third-party vendors.
- Monitor, detect, and respond to security events within production and non-production environments.
- Implement and maintain secrets management, certificate management, and key rotation.
- Support compliance efforts related to PCI DSS, SOC 2, ISO 27001, or similar frameworks.
- Perform threat modeling and risk assessments for new ecommerce features and integrations.
- Improve system reliability through automation, monitoring, and incident response practices.
- Participate in on-call rotations and support production releases as needed
- 5+ years of experience in DevOps or DevSecOps roles.
- Hands-on experience supporting ecommerce platforms, including Swell, Shopify, Magento, BigCommerce, or custom ecommerce solutions.
- Integrate and manage Cloudflare services (WAF, CDN, DDoS protection, Zero Trust access, bot management) to protect and optimize ecommerce applications
- Strong experience with CI/CD tools (GitHub Actions, GitLab CI, Jenkins, Azure DevOps, etc.).
- Experience securing cloud environments (AWS, Azure, and/or GCP).
- Solid understanding of web application security and OWASP Top 10.
- Experience with containerization and orchestration (Docker, Kubernetes).
- Familiarity with SAST, DAST, and dependency scanning tools (e.g., Snyk, Checkmarx, Veracode).
- Strong scripting skills (Bash, Python, or similar).
- Experience with monitoring and logging tools (Prometheus, Grafana, ELK/Elastic, Datadog).
- Understanding of PCI DSS requirements and secure payment processing workflows
Key Skills
Ranked by relevanceReady to apply?
Join Maverc Technologies and take your career to the next level!
Application takes less than 5 minutes