Expert, DevSecOps (40001146)

Job Purpose

• The job holder is responsible for ensuring DevOps becomes a mindset, a culture, and a set of technical practices.
• The job holder will provide communication, integration, automation, and close cooperation among all the people needed to plan, develop, test, deploy, release, and maintain a Solution.
• The job holder will technically lead the DevOps team to design and enhance the Continuous Delivery Pipeline (CDP) that represents the workflows, activities, and automation needed to shepherd a new piece of functionality from ideation to an on-demand release of value to the end user.

Key Accountabilities (1)

• Build, map and optimize delivery of the Continuous Delivery Pipeline (CDP) by addressing key elements such as process time, lead time, delay time, and percent of complete and accurate.
• Continuous Exploration (CE) – understand the market problem/customer need by analyzing and researching to identify the solution required to meet that need, from which suggest development of new features or modification from existing architectures, define and prioritize activities in the Program Backlog.
• Continuous Integration (CI) – take features from the Program Backlog and implement them to deliver a completed work which is committed to version control, built and integrated into a full system or solution, and tested end‑to‑end before being validated in a staging environment.
• Continuous Deployment (CD) – take the changes from the staging environment and deploy them to production.
• Release on Demand (RoD) – make value available to customers all at once, or in a staggered fashion based on market and business needs.

Key Accountabilities (2)

• Build, automate, enhance and measure the DevSecOps factory.
• Build, automate, enhance and integrate threat modeling.
• Build, automate, enhance and integrate application security.
• Build, automate, enhance and integrate penetration testing.
• Build, automate, enhance and integrate continuous security monitoring.

Key Accountabilities (3)

• Consistently develop software systems with higher quality and accuracy of project budgeting and estimation.
• Increase visibility and stakeholder input into features for the next release as it is being developed.
• Engage stakeholders early and consistently throughout the SDLC, leading to fewer defects and incorrect requirements.
• Build trust between software development and IT, enabling organic process improvement and risk mitigation.
• Maximize business value by enabling technical staff to adapt to changing requirements or environmental factors.

Key Relationships - Direct Manager

Key Relationships - Direct Reports

Key Relationships - Internal Stakeholders

Key Relationships - External Stakeholders

Success Profile - Qualification and Experiences

• Bachelor's or Master’s degree in computer science, software engineering or information technology

• At least 7 years of relevant experience in software development and a minimum of 2 years of experience in DevSecOps setup.
• Knowledge of DevSecOps factory pipeline components and DevSecOps metrics.
• Experience working with cloud environments is a must.
• Hands‑on experience with code, commit, code review, documentation, testing, integration, QA, monitoring with front‑end and back‑end languages and technologies.
• Experience working with DevSecOps tools is a must (RE protection, SSL pinning, payload encryption, code quality, source code analysis, SAST/DAST tools).

• English/ according to TCB's regulations in each period