Senior DevSecOps Engineer

Responsibilities

• Administer and optimize GitHub Enterprise, Azure DevOps, and enterprise-scale CI/CD pipelines.
• Define and enforce organization-wide governance, including branch protection, repository standards, and SSO/SCIM.
• Implement GitHub Advanced Security features such as CodeQL, Dependabot, and secret scanning.
• Integrate SAST, SCA, DAST, and IaC scanning into automated workflows.
• Manage Infrastructure as Code (IaC) using Terraform, including policy enforcement and drift detection.
• Secure and operate Azure Kubernetes Service (AKS) and Azure Container Registry (ACR) environments.
• Drive developer productivity through self-service infrastructure and Internal Developer Platform (IDP) capabilities.
• Provide L3 operational support for DevSecOps platforms and resolve complex security incidents.

Requirements

• Strong hands-on experience with GitHub Enterprise, GitHub Advanced Security, and Azure DevOps.
• Proven expertise in SAST, SCA, secret scanning, and vulnerability triage.
• Solid understanding of Azure cloud services, Entra ID (IAM), and network security.
• Experience securing Azure Kubernetes Service (AKS) and containerized applications.
• Proficiency in Terraform and IaC best practices.
• Strong scripting skills in YAML, Bash, and PowerShell.
• Proficiency in Python and JavaScript for automation and security tooling integration.
• Experience working in global, multi-region, and highly regulated environments.

Preferred Qualifications

• Microsoft Certified: Azure DevOps Expert.
• Certified Kubernetes Application Developer (CKAD) or equivalent.
• Exposure to DaaS platforms, specifically MongoDB Atlas.

About the Company

Haleon is a purpose-driven, world-class consumer company dedicated to putting everyday health in the hands of millions. With a trusted portfolio of brands including Sensodyne, Panadol, Advil, and Centrum, we combine deep human understanding with trusted science to deliver better everyday health with humanity.