Lead DevSecOps Engineer

As part of our AI Engineering team, you will lead the Dev Sec Ops  capabilities that help engineers build, release, and operate services across our multi-cloud platform. You will shape CI/CD, Infrastructure as Code, observability, reliability, cloud governance, and secure engineering across Microsoft Azure and Google Cloud Platform (GCP). You will also manage cloud-vendor service reviews, security advisories, escalations, and roadmap discussions.

• Evolve CI/CD pipelines and reusable workflows that enable fast, reliable, and repeatable testing and deployment, with automated quality and security controls
• Build observability and operational readiness through monitoring, logging, tracing, runbooks, and incident response, improving the reliability and performance of production services
• Define and track service reliability objectives, and recovery requirements for production services, using incident reviews to drive continuous improvement.
• Embed proportionate security into engineering workflows and cloud environments, including platform security reviews, threat modelling, access and secrets management, automated scanning, and vulnerability remediation
• Monitor cloud security posture across Azure and GCP, helping teams prioritise misconfigurations, vulnerabilities, and remediation work according to risk
• Manage technical and service relationships with Microsoft, Google Cloud, and other critical vendors, leading service reviews, security advisory responses escalations and roadmap and cost discussions
• Partner with platform, product, and AI/ML engineers on architecture decisions, mentor colleagues, and make clear trade-offs across developer experience, reliability, performance, cost, and security

• Demonstrated hands‑on experience across Dev Ops, SRE, platform engineering, Dev Sec Ops , or related roles, with experience guiding technical decisions or mentoring colleagues
• Experience building and maintaining CI/CD pipelines and release automation, ideally with Git Hub Actions or similar tooling
• Hands‑on experience with Infrastructure as Code and cloud platform automation using Terraform
• Demonstrated ownership of production reliability, including observability, service‑level objectives, incident management, post‑incident reviews, capacity planning, and disaster‑recovery testing.
• Practical experience carrying out security reviews and implementing controls across identity, secrets management, software supply chains, and vulnerability management
• Experience working directly with cloud providers or technology vendors, ideally including Microsoft or Google Cloud, on service reviews, escalations, or roadmap discussions
• Practical experience monitoring and optimising cloud expenditure across large Azure or GCP environments.

• Experience building internal developer platforms or self‑service cloud capabilities
• Experience applying image scanning, artefact signing, or software provenance controls to containerised workloads
• Familiarity with cloud security posture management, policy‑as‑code, security monitoring, or compliance automation
• Experience supporting AI/ML workloads and SaaS platforms in production, 25‑minute screening call
• Take‑home challenge: A hands‑on task to assess your problem‑solving and technical skills
• Combined technical and cultural interview (in‑person)
• Technical Interview: 1‑hour with 2 of our engineers to discuss your solution to the take‑home challenge
• Culture fit: 30‑minute meeting with our leadership team

Work with Us. Change the World.

At AECOM, we’re delivering a better world. Whether improving your commute, keeping the lights on, providing access to clean water, or transforming skylines, our work helps people and communities thrive. We are the world’s trusted…