Senior AI DevSecOps Engineer

CI/CD Pipeline Management: Build and manage the CI/CD pipeline to ensure automation, security, and scalability across all stages of the development lifecycle.

Infrastructure & Security: Design and implement secure multi-cloud infrastructure solutions leveraging cloud services, containerization, and orchestration tools (e.g., Kubernetes, Docker).

Policy as Code: Define and enforce security and compliance policies across Kubernetes clusters using OPA (Open Policy Agent) or Kyverno, ensuring guardrails are automated and auditable.

AI & Platform Automation: Drive the adoption of AI-powered tools and workflows to automate infrastructure operations, optimise CI/CD pipelines, accelerate root cause analysis, improve security posture, and enhance engineering productivity.

Observability & Alerting: Build and maintain a comprehensive observability stack

(NewRelic, Prometheus, Grafana, ELK/EFK, or Azure Monitor) with proactive alerting, dashboards, and runbooks for critical business flows and security events.

Secret & Credential Management: Design and enforce secrets management practices across all environments using, Azure Key Vault, AWS Secrets Manager, 1Password, ensuring zero hardcoded credentials in codebases and pipelines.

Incident Response & On-Call: Own and continuously improve incident response processes

- define runbooks, lead post-mortems, track MTTR, and participate in on-call rotation to maintain platform reliability and SLO adherence.

Threat Modelling & Penetration Testing: Conduct regular threat modelling sessions with engineering teams and coordinate or perform penetration testing activities to proactively identify attack surfaces before they reach production.

Code Security: Conduct regular code reviews and static/dynamic analysis to identify and remediate security vulnerabilities.

Compliance and Best Practices: Ensure compliance with industry standards and best practices, including GDPR, ISO, PCI-DSS, and others.

Collaboration: Collaborate with development, operations, and security teams to foster a culture of automation and security-first thinking.

Mentorship: Mentor junior engineers and other team members on security best practices.

Documentation: Maintain thorough and up-to-date documentation of security policies, procedures, and incident reports.

Trend Scouting: Stay updated with the latest trends in technology and AI to integrate innovative solutions into our processes.

Education: Bachelor's degree in Computer Science, Information Technology, or a related field.

Experience: 5+ years of experience in DevOps/DevSecOps roles, with a strong focus on security.

Proficiency with cloud platforms (AWS, Azure) and their security features.

Strong knowledge of CI/CD tools (Azure Pipeline, Argocd, GitLab CI).

Experience with IaC tools (Terraform, Terragrunt, Helm) and familiarity with the GitOps concept.

Expertise in containerization and orchestration (Docker, Kubernetes).

Familiarity with security tools (SonarQube, OWASP ZAP, Trivy).

Strong scripting skills (Python, Bash, PowerShell).

Knowledge of network security, firewalls, VPN, IDS/IPS.

Good knowledge on SQL/NoSQL (PostgreSQL, MongoDB etc).

Understanding of AI and machine learning principles to enhance security measures and automate threat detection.

AI skill for daily work

Security-first mindset - naturally embeds security thinking into engineering decisions without being a blocker to delivery velocity.

Clear communicator - able to translate security risks into business language for non-technical stakeholders and leadership.

Proactive and solutions-oriented thinking.

Innovative and entrepreneurial mindset.

Ability to work well as part of a team and autonomously.

Capability to thrive in a fast-paced, high-volume environment.

Strong decision-making abilities.

Excellent work ethic.

Very competitive remuneration package

Premium healthcare for yourself and two family members

Monthly meal, telephone and transport allowance

Generous year-end bonus

A solid business and technical team behind you

The pleasant, enthusiastic, international work environment

Opportunity for traveling & working in Southeast Asia

A brand new & state of the art office in District 1 (HCM city)

Latest technologies, flexible working hours

And many more to come.

PEGASI – IT Recruitment Consultancy | Email: recruit@pegasi.com.vn | Tel: +84 28 3622 8666