Security Engineer - Platform, DevSecOps & PK

Introduction

Provide hands-on security engineering across the Client's shared platform

controls, including PKI, Azure Key Vault, DevSecOps security (GitHub Advanced

Security, CI/CD pipelines), automation governance and AI/Copilot security

guardrails, ensuring that platform-level controls are correctly configured, tested

and embedded in operations.

Duties & Responsibilities

Key Responsibilities

• Implement and maintain enterprise PKI controls: certificate issuance,

renewal, revocation and policy governance; prevent outages through expiry

monitoring and lifecycle management across platforms, applications and

endpoints.

• Administer Azure Key Vault: access policies, key and secret rotation, audit

logging, and secure integration with applications and delivery pipelines.

• Configure and manage GitHub Advanced Security or equivalent: code

scanning, secret scanning and dependency scanning; integrate findings into

developer and remediation workflows.

• Implement DevSecOps security controls in CI/CD pipelines: security gates,

policy checks, SAST/DAST integration and secure infrastructure-as-code

templates.

• Govern the security of Power Automate and automation platforms:

connector controls, data handling restrictions, approval policy enforcement

and DLP guardrails.

• Support implementation and monitoring of AI/Copilot security guardrails in

collaboration with the Senior M365/Azure Lead and Data Security Specialist,

ensuring AI-enabled capabilities are technically configured, monitored and

aligned to data protection and access governance requirements.

• Maintain technical documentation, runbooks and operational records for

PKI, DevSecOps and platform controls.

• Provide engineering input to architecture and improvement initiatives

across the cyber operations team.