Oliver Wyman - Lead DevSecOps Engineer

United States – Boston, New York, Toronto, Hybrid Possible

Lead Dev Sec Ops  Engineer

No two OW Digital projects are the same. You’ll be working with varied and diverse teams to deliver unique and unprecedented solutions across industries. The Lead Dev Sec Ops  Engineer is not a Sys Admin or Site Reliability Engineer, though many of those skills will be useful in the role. Our Dev Sec Ops  team lives under our Engineering Capability, the team responsible for conceiving, designing and delivering breakthrough solutions for clients and other Oliver Wyman teams.

You will join teams staffed to client projects and must constantly invent new things, not maintain an existing platform.

This role “plays well with cloud” but is more like a software engineer with a Dev Sec Ops  specialization. Conceiving, designing and delivering the project infrastructure is paramount. This might include working directly with client IT teams to understand and advise around their own infrastructure. You also need some familiarity with how the major application frameworks (Node, Java, Python) operate. And while some coding experience is extremely helpful, the main thing is you are part of the dynamic staffing team.

• Craft technical solutions to challenging problems
• Partner with OWG practice groups (e.g., Retail, Health & Life Sciences, etc.) and client teams to understand business and client infrastructure needs and opportunities
• Advise on and support secure infrastructure solutions for teams, whether building on our internal hosting solution or with our clients seeking in‑house digital transformations
• Drive the Dev Sec Ops  role on technical projects (as a leader or contributor), rarely missing opportunities for good solution design and promoting clarity, robustness, security, performance and scalability
• Define engineering goals for clients from non‑technical briefings, act as the go‑to for infrastructure solutions on a project and technically lead that workstream
• Communicate technical ideas clearly to any audience and write documentation for an entire solution or program of work
• Objectively and fairly assess and influence technology decisions based on an understanding of the project's objectives and goals
• Contribute significantly to a discovery phase, run estimation sessions with teams and provide estimates on complex solutions
• Recognize, execute or direct refactoring opportunities across complex or interdependent systems
• Actively build trust and credibility with both technical and non‑technical stakeholders within OW

You are a well‑rounded technologist who brings a wealth of real‑world experience with:

• Building things using different tools and technologies
• Adapting to evolving technical trends
• Working across varying facets of the technology stack
• Public cloud environments (e.g., AWS, Azure, GCP)
• Deploying, scaling, and monitoring generative AI applications (e.g., Azure AI Foundry, AWS Bedrock) and related services (Azure AI Search, Open Search, etc.)
• Ability to secure, monitor, and optimize APIs for AI‑driven applications
• Versatility around technology and an ability to apply the appropriate technology to problem‑solving
• Handling multiple work streams and prioritizing accordingly
• Enterprise‑scale delivery of full‑stack systems with security, extensibility, and robustness at the forefront

• Being fungible and flexible to work on a variety of technologies, including those that are new or unfamiliar to you
• Client relationship building and ongoing client relationship management

We’re also hoping you’ll be able to show us experience with some of the following. You don't need deep experience with everything here to apply; still, some depth in one or more of these will go a long way:

• Dev Sec Ops  tools:
  Docker, Rancher, Kubernetes, Jenkins, Terraform
• Cloud Platforms: AWS, Azure
• Infrastructure‑as‑Code/Platform‑as‑Code cloud‑native tooling:
  Serverless, EKS, AKS
• Operating Systems:
  Windows Server, Linux (Ubuntu)
• Scripting:
  Python, Bash, Power Shell, AWS CLI, Azure RM

• Web application capabilities:
  Node.js, Express, REST APIs
• AI
  
  Risk management:
  
  Understanding and mitigation of risks unique to generative AI (prompt…