Lead DevSecOps Engineer

Company Description

Work with Us. Change the World.

At AECOM, we're delivering a better world. Whether improving your commute, keeping the lights on, providing access to clean water, or transforming skylines, our work helps people and communities thrive. We are the world's trusted infrastructure consulting firm, partnering with clients to solve the world's most complex challenges and build legacies for future generations. There has never been a better time to be h accelerating infrastructure investment worldwide, our services are in great demand.

We invite you to bring your bold ideas and big dreams and become part of a global team of over 50,000 planners, designers, engineers, scientists, digital innovators, program and construction managers and other professionals delivering projects that create a positive and tangible impact around the world. We're one global team driven by our common purpose to deliver a better world.

Join us.

In AECOM's AI Engineering team, your work will help deliver technology that directly shapes the physical world around us. We build AI-driven products that change how infrastructure and buildings are designed and engineered, reducing waste, cutting CO₂, and making the built environment more efficient and sustainable. This role ensures those products and the platforms behind them are reliable, scalable, and secure by design.

With our AI Engineering team we've created a unique setup: a lean, highly technical team with the speed and ownership of a start up, backed by the scale, resources, and domain expertise of one of the world's leading engineering firms.

There has never been a better time to be  are leading the industry's AI transformation, and with our people and technology we deliver excellence and innovate with impact.

We invite you to bring your bold ideas and big dreams to solve the world's most complex challenges. We're one global team driven by our common purpose to deliver a better world. Join us.

As part of our AI Engineering team, you will lead the Dev Sec Ops  capabilities that help engineers build, release, and operate services across our multi-cloud platform. You will shape CI/CD, Infrastructure as Code, observability, reliability, cloud governance, and secure engineering across Microsoft Azure and Google Cloud Platform (GCP). You will also manage cloud-vendor service reviews, security advisories, escalations, and roadmap discussions.

• Evolve CI/CD pipelines and reusable workflows that enable fast, reliable, and repeatable testing and deployment, with automated quality and security controls
• Build observability and operational readiness through monitoring, logging, tracing, runbooks, and incident response, improving the reliability and performance of production services
• Define and track service reliability objectives, and recovery requirements for production services, using incident reviews to drive continuous improvement.
• Embed proportionate security into engineering workflows and cloud environments, including platform security reviews, threat modelling, access and secrets management, automated scanning, and vulnerability remediation
• Monitor cloud security posture across Azure and GCP, helping teams prioritise misconfigurations, vulnerabilities, and remediation work according to risk
• Manage technical and service relationships with Microsoft, Google Cloud, and other critical vendors, leading service reviews, security advisory responses, escalations, and roadmap and cost discussions
• Partner with platform, product, and AI/ML engineers on architecture decisions, mentor colleagues, and make clear trade-offs across developer experience, reliability, performance, cost, and security

Qualifications

Must-Have Qualifications

• Demonstrated hands-on experience across Dev Ops, SRE, platform engineering, Dev Sec Ops , or related roles, with experience guiding technical decisions or mentoring colleagues
• Experience building and maintaining CI/CD pipelines and release automation, ideally with Git Hub Actions or similar tooling
• Hands-on experience with Infrastructure as Code and cloud platform automation using Terraform
• Demonstrated ownership of production reliability, including observability, service-level objectives, incident management, post-incident reviews, capacity planning, and disaster-recovery testing.
• Practical experience carrying out security reviews and implementing controls across identity, secrets management, software supply chains, and vulnerability management
• Experience…