DevSecOps Architect: Secure Pipelines & Quality Gates

Global Executive Consultants Ltd.; Hong Kong; On-site; HKD 480,000 - 720,000; Full time

Job summary

Global Executive Consultants Limited seeks a DevSecOps Engineer to strengthen the secure software delivery pipeline. You will own automation, security scanning, and quality gates ensuring every release is stable, secure, and production-ready.

You will act as an independent quality and security authority, collaborating with developers, infrastructure teams, and application architects to uphold the deployment model.

Qualifications

• Bachelor's degree in computer science, IT, information security, or related technical discipline.
• 3+ years in DevOps, security assessment, automated testing, or software quality assurance.
• Hands-on with CI/CD tools, security assessment tools, and scripting languages.
• Experience with automated testing frameworks and AI-assisted testing development.

Responsibilities

• Build, maintain, and optimize CI/CD pipelines to streamline secure and reliable software delivery.
• Implement and manage automated security scanning tools within the deployment pipeline, including AI code review, SAST, DAST, and dependency checkers.
• Develop comprehensive automated testing suites, covering integration, end-to-end, and load testing.
• Serve as an independent auditor for code produced by developers and AI assistants - with authority to block merges failing security or quality checks.
• Collaborate with Infrastructure and Application architects to enforce the deployment model.

Skills

CI/CD

Security assessment

Automated testing

Scripting

Education

Bachelor's degree in Computer Science or related

Tools

SAST

DAST

Dependency checkers

AI-assisted testing

Job description

Global Executive Consultants Limited seeks a DevSecOps Engineer to strengthen the secure software delivery pipeline. You will own automation, security scanning, and quality gates ensuring every release is stable, secure, and production-ready.

You will act as an independent quality and security authority, collaborating with developers, infrastructure teams, and application architects to uphold the deployment model.