DevSecOps Team Lead, BMLL Technologies

• Proven DevSecOps/DevOps leadership with full-lifecycle AWS infrastructure ownership
• Hands-on AWS (IAM, VPC, GuardDuty, CloudTrail), CI/CD (GitHub Actions, Terraform, JFrog) and IaC governance
• Deep application-security knowledge (OWASP, Secure SDLC, supply-chain risks)
• Scripting proficiency (Python, Go or Bash) and experience with scanning tools (Trivy, Grype, SonarQube)
• Expertise in GitOps, Policy-as-Code and compliance tooling
• Vision & Strategy: Evangelise secure, performant DevSecOps roadmaps
• Collaboration & Influence: Build strong partnerships across teams
• Execution Excellence: Deliver reliable, auditable, optimised deployments
• Continuous Improvement: Drive a culture of learning and innovation
• Resilience & Ownership: Own outcomes through incidents and change
• Customer Focus: Align practices to accelerate business value and user experience

Desirable

• We’re seeking an experienced DevSecOps Team Lead to build, guide and grow a high-performing DevSecOps function. You’ll own the secure evolution of our AWS cloud-native infrastructure, CI/CD pipelines and deployment practices—embedding security, reliability and operational excellence into every phase of development and deployment.
• As a hands-on leader, you’ll partner closely with Engineering, Platform and Security stakeholders to ensure DevSecOps drives business value, customer trust and peak cloud performance
• Strategy & Technical Leadership
• Define and champion the DevSecOps roadmap, aligning infrastructure, security and engineering priorities
• Set vision and standards for CI/CD (GitHub Actions, Terraform, JFrog) with built-in security (SAST, SCA, IaC scanning)
• Advocate AWS best practices (IAM, KMS, VPC security, GuardDuty, CloudTrail) and enforce Infrastructure-as-Code governance
• Infrastructure Ownership & Performance
• Architect, deploy, version (AMI/Docker), patch and govern AWS infrastructure end-to-end
• Establish central IaC standards, approval workflows and formal change controls
• Standardise monitoring and observability: dashboards, high-signal alerts and performance benchmarks (ECS/EKS, Fargate, GPU)
• Optimise costs and latency (warm container pools, VPC endpoints, tagging and governance)
• Operational Security
• Govern a secure software supply chain: artifact management, vulnerability scanning and SBOM generation
• Drive “shift-left” security—integrating secure patterns into developer workflows and CI/CD pipelines
• Rapidly triage and remediate security alerts across build, cloud and runtime environments
• Team Leadership & Management
• Mentor & Develop: Provide clear direction, support and mentorship to a cross-functional team of DevOps and Security Engineers
• Objectives & Reviews: Set and review individual/team objectives aligned to business goals; conduct regular 1:1s, performance reviews and development conversations
• Culture & Inclusion: Foster a collaborative, psychologically safe environment that values open communication and continuous improvement
• Skills & Growth: Identify skills gaps, plan training and career-development initiatives
• Resourcing & Balance: Ensure appropriate team resourcing, balanced workloads and act as escalation point for conflicts or challenges
• Cross-Functional Collaboration: Coordinate with other team leads on initiatives and resource planning
• Best Practices: Champion DevSecOps ways of working and track KPIs (deployment frequency, lead time, failure rate, MTTR, security posture, capacity and cost efficiency)
• Governance & Compliance
• Lead risk assessments for new technologies and deployment patterns
• Partner with Compliance to support ISO 27001, SOC 2, DORA and other frameworks
• Ensure all configurations are version-controlled, auditable and policy-compliant
• Maintain and test Business Continuity and Disaster Recovery plans