Senior Cloud Security & DevSecOps Consultant

PwC; Hong Kong; On-site; HKD 600,000 - 900,000; Full time

Job summary

DarkLab Operations is seeking a Senior Cloud Security Consultant to support clients in designing secure public cloud environments and DevSecOps practices. You will review architectures, implement security controls, and oversee cloud migrations across Hong Kong and the region.

Responsibilities include advising on IAM, network security, and CI/CD integrations, plus reviewing AI security considerations and governance. Strong English communication is required; Cantonese/Mandarin are a plus.

Qualifications

• 2–4 years hands‑on experience in public cloud, security engineering, or DevOps/DevSecOps roles.
• Proficiency in at least one major cloud platform (AWS/Azure/GCP) with IAM, networking and security services.
• Experience with infrastructure‑as‑code (Terraform or similar) and CI/CD tooling (GitHub Actions, GitLab CI, Azure DevOps, Jenkins).
• Scripting (Python, Bash, or PowerShell) and understanding of Docker/Kubernetes security.
• University degree in CS/IS/Engineering or related field.
• Strong English communication; Cantonese and/or Mandarin an advantage.

Responsibilities

• Advise clients on secure public cloud design and architecture (IAM, networking, landing zones).
• Support cloud adoption and migration programmes with security architecture oversight.
• Review client cloud environments for CIS/NIST posture and remediation.
• Guide DevSecOps adoption with SAST/DAST/SCA and policy‑as‑code in CI/CD pipelines.
• Support AI security engagements including governance, data protection, and model risk.
• Deliver clear written reports, architecture documents, and client presentations.

Skills

Public cloud

DevSecOps

AI security

Cloud architecture

Education

University degree in CS/IS/Engineering

Tools

Terraform

GitHub Actions

GitLab CI

Azure DevOps

Jenkins

Job description

DarkLab Operations is seeking a Senior Cloud Security Consultant to support clients in designing secure public cloud environments and DevSecOps practices. You will review architectures, implement security controls, and oversee cloud migrations across Hong Kong and the region.

Responsibilities include advising on IAM, network security, and CI/CD integrations, plus reviewing AI security considerations and governance. Strong English communication is required; Cantonese/Mandarin are a plus.