IT & Systems Engineer (DevSecOps)

Firmly established as Africa’s carriers’ carrier, award-winning capacity wholesaler WIOCC provides international and African telcos and ISPs with unrivalled high-speed, resilient and diverse capacity into, within and out of Africa.

The IT & Systems Engineer (DevSecOps) will be responsible for designing, implementing, and maintaining CI/CD and GitOps pipelines to ensure secure, reliable, and scalable software delivery in cloud-native environments. This role involves integrating robust security practices across the entire DevOps pipeline to enhance the overall security, efficiency, reliability, and performance of software and system deployments.

1. Design, implement, and maintain CI/CD pipelines using GitHub Actions for automated software delivery.
2. Implement GitOps-based deployment workflows utilizing ArgoCD.
3. Support blue/green and canary deployment strategies within Kubernetes environments.
4. Automate infrastructure provisioning using Infrastructure as Code, with a preference for Terraform.
5. Support containerization and orchestration with Docker and Kubernetes, developing and maintaining Kubernetes manifests.
6. Troubleshoot pipeline and deployment issues across various environments.
7. Maintain comprehensive documentation for all CI/CD processes and policies.
8. Integrate security tools and practices into CI/CD pipelines (DevSecOps) to ensure compliance with policies and regulations.
9. Integrate and maintain container and code security tools such as Snyk, Aqua Security, Anchore, and CodeQL.
10. Automate security testing (SAST, DAST, IAST) and vulnerability management processes.
11. Collaborate with the IT team to remediate vulnerabilities and apply necessary patches or mitigations.
12. Ensure adherence to industry best practices and organizational security policies.
13. Manage secrets and credentials using HashiCorp Vault or Azure Key Vault.
14. Implement monitoring, logging, and performance optimization solutions for deployed services, applications, and infrastructure.
15. Understand and manage the underlying IT infrastructure, including servers, networking, storage, and virtualization.
16. Collaborate with development, security, and operations teams to build secure, scalable architectures meeting availability, performance, and maintainability needs.
17. Identify and resolve issues and bottlenecks in the software development lifecycle.
18. Improve collaborative incident response, maintaining documentation, runbooks, and modules.
19. Participate in Agile ceremonies and continuous improvement initiatives.
20. Implement and maintain version control systems, configuration management tools, and other DevOps technologies.
21. Undertake projects and reporting as directed by management.

1. Bachelor of Science in Computer Science or an equivalent degree from a recognized university.
2. Professional certifications in IT Security (CISSP, CCSP, CISA, CISM) are a plus.
3. Minimum of 3 years of experience in a similar role.
4. Proficiency in scripting and coding languages such as Python, JavaScript, and React.js.
5. A strong advocate for DevOps culture, process improvement, and automation.
6. Ability to investigate reliability or performance issues using automated scanning and monitoring tools.
7. Strong awareness of cybersecurity principles, including secure coding, encryption, threat modeling, and vulnerability management.
8. Experience with security testing tools like OWASP ZAP, Burp Suite, and Nessus.
9. Familiarity with compliance frameworks and standards such as GDPR, ISO 27001, and NIST.
10. Ability to effectively use B/OSS tools for accurate and concise information recording.
11. Strong knowledge of DevSecOps and cloud-native tooling, including CI/CD platforms (GitHub Actions, Azure DevOps, Jenkins, GitLab CI), GitOps tools (ArgoCD), Infrastructure as Code (Terraform preferred), and containerization/orchestration (Docker, Kubernetes).
12. Experience with container and code security scanning tools (Snyk, Aqua Security, Anchore, CodeQL) and secrets management solutions (HashiCorp Vault, Azure Key Vault).
13. Understanding and management of IT infrastructure, including servers, networking, storage, and virtualization across on-premises and cloud environments.
14. Strong knowledge of operating systems, networking, virtualization, and cloud platforms (Azure, GCP).