DevSecOps Engineer

Morae is a trusted provider of technology-enabled solutions transforming the delivery of legal services. We partner with the world’s largest law firms and corporate legal departments to solve complex challenges through innovative, data- and AI-driven solutions. By combining deep industry expertise with advanced technology, we help our clients thrive in a rapidly evolving marketplace.

Learn more at

Reports To: Dev Ex Lead

Location: Cape Town, South Africa

Employment Type: Permanent / Full Time

Experience: 4–7 years in Dev Ops, Dev Sec Ops , or Platform Engineering roles

The Dev Sec Ops  Engineer is responsible for building and operating secure development and deployment platforms that enable product engineering teams to deliver software safely, efficiently, and reliably
.

Working within the Developer Experience (Dev Ex) capability, this role focuses on integrating security practices directly into engineering workflows, CI/CD pipelines, and development platforms to ensure security controls are consistently applied throughout the software development lifecycle.

The Dev Sec Ops  Engineer collaborates closely with engineering teams, architects, and QA to embed security into delivery processes while maintaining high developer productivity and platform reliability
.

Engineers in this role are also expected to leverage modern AI-assisted engineering practices to improve operational efficiency while maintaining strong engineering judgement and system reliability.

• 4–7 years of experience in Dev Ops, Dev Sec Ops , or Platform Engineering roles
• Experience designing and operating CI/CD pipelines
• Experience working with cloud infrastructure (Azure preferred)
• Experience with automation and Infrastructure-as-Code
• Experience integrating security controls into delivery pipelines
• Experience supporting engineering teams in production environments

• Computer Science
• Software Engineering
• Information Technology
• Cybersecurity
• Information Systems

• Design, build, and maintain CI/CD pipelines used by engineering teams
• Integrate automated security checks into build and deployment workflows
• Support engineering teams with secure release processes and deployment strategies
• Improve pipeline reliability, performance, and security controls

• Embed security practices into the software development lifecycle
• Implement automated vulnerability scanning and dependency analysis within delivery pipelines
• Ensure secure handling of secrets, credentials, and environment configurations
• Support development teams in identifying and resolving application and service security issues

• Build and maintain infrastructure automation and development environments
• Support development, staging, and production environments
• Implement monitoring, logging, and observability capabilities
• Ensure platform stability, operational resilience, and secure configuration

• Work with architects to implement security controls and architectural design decisions
• Support engineering teams in applying secure development practices
• Participate in architecture and security reviews where platform or pipeline considerations apply
• Assist teams in implementing secure patterns in applications and services
• Enable engineering teams with tooling and automation that improves delivery speed and reliability
• Support team onboarding into CI/CD and platform tooling
• Improve development workflows across build, deployment, and release processes
• Document platform standards and operational practices
• Use AI-assisted development tools to improve automation, scripting, and operational workflows
• Evaluate AI-generated outputs for correctness, reliability, and security
• Apply engineering judgement to ensure stable and secure systems

• CI/CD platform configuration and automation
• Infrastructure-as-Code and environment provisioning
• Cloud platform operations (Azure preferred)
• Containerisation and container orchestration
• Security scanning and dependency management
• Monitoring, logging, and observability…