Manager - Engineering, Development, Security & Operations(DevSecOps)

Job Description

Requirements

• Education:
• Minimum 4-year Academic Degree with Honors (B Eng. / BSc Computer Science / Engineering or equivalent Degree Preferred)
• Relevant certification/accreditation/membership with professional body as required for role e.g., TOGAF
• Experience:
• Languages: Java/Kotlin, .NET/C#, Node.js, Python, or Go (at least two).
• APIs & Messaging: REST/GraphQL, gRPC; Kafka/RabbitMQ; API Gateway management.
• Cloud & Containers: AWS/Azure/GCP; Kubernetes, Helm, Docker; service mesh (Istio/Linkerd).
• CI/CD & IaC: Azure DevOps/GitHub Actions/Jenkins; Terraform, Ansible; artifact registries (Nexus/Artifactory).
• Observability: Prometheus/Grafana, ELK/EFK, OpenTelemetry, Jaeger/Tempo; incident tooling (PagerDuty/Opsgenie).
• Data: PostgreSQL/MySQL, Redis, object storage; basics of data pipelines for events/audit trails.
• Standards/Compliance: PCI DSS, ISO 27001/27002, OWASP ASVS/Top 10, NIST CSF.
• Competencies:
• Technical Proficiency:
• Skills
• Strong stakeholder management; ability to translate business goals into delivery plans.
• Excellent communication and documentation; effective incident leadership under pressure.
• Coaching mindset; continuous improvement and measurable outcomes orientation.
• Behavioral Qualities
• Complete Accountability
• Courage
• Relational
• Adaptable
• Complete candour
• Culturally aware
• Emotional Maturity (High EQ)
• Innovation
• Integrity
• Leadership
• Team Player

Responsibilities

• Main Job Functions:
• Lead cross-functional squads to ship features and platforms on predictable cadences (sprints/PI).
• Define engineering standards: coding, branching, code review, testing, and release criteria.
• Drive architecture with the Enterprise/Platform Architect (microservices, event-driven, API-first).
• Remove delivery blockers; manage tech debt; enforce “definition of done”.
• Establish golden paths/templates for services and infrastructure.
• Operate and optimize cloud/Kubernetes platforms (HA, autoscaling, backups, DR, multi‑AZ/region where applicable).
• Manage configuration, service mesh, API gateways, ingress/egress, certificates, and key rotations.
• Champion FinOps: capacity planning, rightsizing, tagging, cost visibility and governance.
• Implement SLOs/SLIs, error budgets, proactive alerting, and runbooks.
• Lead incident response (on-call rotations, post-incident reviews, corrective actions).
• Ensure performance, resilience, and latency objectives for customer‑facing journeys.
• Security, Risk & Compliance
• Align SDLC and operations to PCI DSS, ISO 27001/27002, SOC 2, local data protection, and internal security policies.
• Enforce least privilege, network segmentation, VPNs, IP whitelisting, WAF, and API security.
• Coordinate vulnerability management and pen test remediation with InfoSec and R&C.
• Quality Engineering
• Promote shift‑left testing and canary/blue‑green deployment strategies.
• APIs, Integrations & Ecosystem
• Govern API lifecycle (design, versioning, documentation, developer portal, monitoring).
• Ensure robust, secure integrations with banks, merchants, and 3PPs via VPNs, mTLS,
• Lead and grow an in‑house engineering capability that designs, builds, secures, deploys, and operates digital financial services platforms (e.g., wallet, payments, APIs, integrations).
• Own the full software delivery lifecycle (SDLC) and DevSecOps practices—ensuring secure-by-design delivery, reliability, speed-to-market, and regulatory compliance across environments (dev/QA/stage/prod).
• Own CI/CD pipelines, artifact repositories, infrastructure-as-code (IaC), secrets management, release automation, and environment parity.
• Implement secure-by-design: SAST/DAST, dependency scanning, container image scanning, SBOMs, signed artifacts, and policy-as-code.