DevSecOps Engineer Specialist

Accenture PLC; Petaling Jaya; Presencial; MYR 120.000 - 180.000; Jornada completa

Descripción de la vacante

Accenture PLC in Malaysia is seeking a DevSecOps Engineer with 5–7 years of hands-on experience to design, build, and maintain CI/CD pipelines across the programme's SDLC, focusing on secure and efficient delivery for core banking and payments transformation.

You will integrate security controls, automate checks, manage source control, artefact management, and collaborate with the Security Architect and Infrastructure Lead to ensure repeatable, scalable pipeline workflows.

Formación

• Hands-on proficiency with CI/CD platforms and security integrated pipelines.
• Experience in configuring and managing code quality and security scanning tools.
• Familiarity with artefact management and container orchestration.

Responsabilidades

• Design, build, and maintain CI/CD pipelines to support development, testing, and deployment activities across the SDLC lifecycle.
• Integrate security controls and automated security checks into pipelines, embedding shift-left security across the lifecycle.
• Configure and manage DevSecOps tooling including source control, scanning, packaging, and artefact management.

Conocimientos

CI/CD expertise

Security by design mindset

Hands-on engineering

Herramientas

Jenkins

Azure DevOps

GitLab CI

GitHub Actions

Git

SonarQube

Checkmarx

Snyk

OWASP ZAP

Nexus

JFrog Artifactory

Docker

Kubernetes

Terraform

Ansible

CloudFormation

AWS

Azure

GCP

Prometheus

Grafana

ELK Stack

Descripción del empleo

Role Overview

The DevSecOps Engineer is a mid-level, 5-7 years of experience, technical role responsible for designing, building, and maintaining DevSecOps pipelines that enable continuous integration and continuous delivery (CI/CD) across the programme's application development and deployment lifecycle. Reporting to the Infrastructure Lead, this role plays a critical enabling function across the build, test, and deployment phases of the core banking and payments transformation, ensuring that development teams have robust, secure, and efficient pipelines to support rapid and reliable software delivery. The DevSecOps Engineer is expected to be a strong hands-on technical contributor with deep familiarity across the end-to-end DevSecOps toolchain and a continuous improvement mindset.

Key Responsibilities

• Design, build, and maintain CI/CD pipelines to support application development, testing, and deployment activities across the programme's SDLC lifecycle


• Integrate security controls and automated security checks into pipelines at every stage, embedding a shift-left security approach across the development lifecycle


• Configure and manage DevSecOps tooling across key functions including source code control, code scanning, static and dynamic analysis, code merging, dependency management, code packaging, and artefact management


• Implement and maintain automated testing integrations within pipelines, coordinating with the Test Automation Lead to ensure functional, regression, and security test suites are triggered and reported correctly


• Manage version control processes and branching strategies, ensuring consistency and traceability across development streams and release branches


• Continuously monitor, maintain, and iterate on existing pipelines to improve deployment efficiency, reduce build times, and address bottlenecks as the programme scales through successive test cycles and releases


• Support the build and test phases of application rollout, providing hands-on pipeline support to development and testing teams throughout the SDLC lifecycle


• Troubleshoot and resolve pipeline failures, environment issues, and deployment blockers in a timely manner, escalating complex issues to the Infrastructure Lead as appropriate


• Collaborate with the Security Architect to ensure that security scanning, vulnerability management, and compliance checks are embedded within pipeline workflows and aligned to the programme's security standards


• Maintain comprehensive documentation for all pipeline configurations, tooling setups, and operational runbooks to ensure repeatability and knowledge continuity across the team


• Support environment provisioning and infrastructure-as-code activities using tools such as Terraform, Ansible, or equivalent, coordinating with the broader infrastructure team


• Contribute to the continuous improvement of DevSecOps practices, evaluating new tools and techniques and recommending enhancements to the Infrastructure Lead

Technical Expertise Required

• Hands-on proficiency with CI/CD platforms such as Jenkins, Azure DevOps, GitLab CI, GitHub Actions, or equivalent

• Strong experience with source code control and version management tools, particularly Git, including branching strategies and merge request workflows

• Proficiency in code quality and security scanning tools such as SonarQube, Checkmarx, Snyk, OWASP ZAP, or equivalent

• Experience with code packaging and artefact management tools such as Nexus, JFrog Artifactory, or equivalent

• Familiarity with containerisation and orchestration technologies including Docker and Kubernetes

• Experience with infrastructure-as-code tools such as Terraform, Ansible, or CloudFormation

• Working knowledge of cloud platforms such as AWS, Azure, or GCP and their native DevSecOps tooling and services

• Understanding of automated testing integration within CI/CD pipelines, including unit, integration, and regression test execution

• Familiarity with monitoring and observability tools such as Prometheus, Grafana, ELK Stack, or equivalent to support pipeline and deployment health monitoring

• Experience working within banking, financial services, or similarly regulated environments is advantageous