DevSecOps & Cloud Security Consultant

About the role

We are seeking an experienced DevSecOps & Cloud Security Consultant to assess, strengthen, and implement security controls across CI/CD pipelines, cloud infrastructure, Kubernetes environments, and application delivery workflows.

Key responsibilities

• Assess and enhance security across CI/CD pipelines and DevSecOps workflows.
• Review IaC templates, Helm charts, and source code for misconfigurations, hard‑coded credentials, and other vulnerabilities.
• Perform manual and automated security reviews of Kubernetes environments and enforce policies using OPA/Gatekeeper.
• Manage vulnerability identification, prioritisation, remediation, and re‑validation.
• Evaluate security tools, conduct proof‑of‑concepts, and prepare detailed assessment reports with risk ratings and remediation recommendations.

Required profile

• 5–7+ years of hands‑on experience in DevSecOps and cloud security.
• Proven ability to secure CI/CD pipelines, IaC, Helm charts, and source code.
• Strong knowledge of cloud security configurations, IAM, networking, encryption, and logging.
• Excellent communication skills and willingness to relocate to Muscat for full‑time onsite work.

Required skills

• CI/CD pipeline security
• Infrastructure as Code (IaC) security
• Kubernetes and Helm chart security
• Static Application Security Testing (SAST)
• Cloud security and IAM
• Vulnerability management and risk assessment
• OPA/Gatekeeper policy enforcement
• Security automation and tool evaluation/POC

What we offer

• Bachelor accommodation
• Airfare and visa sponsorship
• One‑year contract with possible extension