DevSecOps Engineer

G MASS Consulting are seeking two experienced Dev Sec Ops  Engineers to support a strategic security-by-design initiative across an Investment Bank's global engineering platforms.

These roles sit within a regulated investment banking environment and focus on embedding security controls directly into CI/CD and cloud delivery pipelines.

This role suits a hands-on Dev Sec Ops  Engineer who has worked at scale, understands regulated delivery environments and is comfortable balancing velocity with security and control. It is not a pure platform or advisory security role - delivery ownership is key.

• Design, build and maintain secure, enterprise-grade CI/CD pipelines
• Embed automated security scanning, compliance checks, and vulnerability management into delivery workflows
• Automate infrastructure provisioning and application deployment using Dev Sec Ops  and IaC tooling
• Support and enhance containerised and cloud environments with a strong security-first mindset
• Partner closely with engineering, security, and platform teams to enforce secure delivery standards

• Enterprise CI/CD engineering (Jenkins and/or Git Hub Actions)
• Secure pipeline design, secrets management and controlled release workflows
• Integration of security tooling such as SAST and code quality scanners (e.g. Sonar Qube, Fortify or equivalents)
• Strong AWS experience, including IAM (roles, policies, least-privilege), VPC fundamentals, EC2, S3, Cloud Watch
• Infrastructure as Code using Terraform or Cloud Formation
• Automation and scripting using Bash and Python (Groovy advantageous)

• Containerisation and orchestration (Docker, Kubernetes, EKS)
• Open Shift, Helm or enterprise container platforms
• Spanish speaking

12-month contract.

Paying up to a maximum of $415 (C2C) & $380 (W2) per day, depending on experience.

If based in New York, working on a hybrid basis.

Can also be worked remotely, but must adhere to EST.