Mid Senior DevSecOps Engineer

Company Description

TERRA is MENA’s first B2B micro-mobility startup that provides a fleet mobility solution saving money and time with a limitless range. Modular solutions that match every community’s characteristics and enable swapping in seconds, replacing the need for petrol-powered motorcycles and dedicated charging stations.

Role Description

We are looking for a Mid to Senior DevSecOps / Platform Engineer who brings together deep expertise in AWS, Terraform, security automation, and modern DevOps practices. This role is a hybrid of DevSecOps, DevOps, and Platform Engineering — ideal for professionals who can build secure, scalable infrastructure and streamline delivery pipelines while enhancing platform resilience and performance.

You’ll be responsible for managing our cloud infrastructure, integrating security across CI/CD workflows, supporting developer productivity, and ensuring our platform is robust, secure, and efficient.

Key Responsibilities

• Embed security across the SDLC by integrating shift-left security practices, vulnerability scanning (SAST, DAST, SCA), and compliance automation into CI/CD workflows.
• Design, implement, and manage secure, scalable cloud infrastructure using Terraform and AWS, following modular, version-controlled, and policy-as-code best practices (OPA, Sentinel).
• Build and maintain CI/CD pipelines using tools such as GitHub Actions, GitLab CI, Jenkins, or AWS CodePipeline, supporting fast and secure code delivery.
• Develop and support internal developer platforms, enabling self-service infrastructure provisioning, observability, and deployment automation for engineering teams.
• Manage container orchestration using Kubernetes (EKS), including Helm chart lifecycle, service discovery, and security hardening.
• Implement infrastructure observability using tools like CloudWatch, Prometheus, Grafana, and ELK/EFK for proactive monitoring, logging, and alerting.
• Drive platform reliability and incident readiness through robust automation, blue-green or canary deployments, RCA processes, and infrastructure-as-code governance.
• Collaborate cross-functionally with developers, SREs, and security teams to continuously improve platform security, scalability, and developer experience.

Qualifications

• Bachelor’s degree in Computer Science, Software Engineering, Information Security, or a related field (or equivalent practical experience).
• Strong programming background with experience in object-oriented programming (OOP) languages such as Python, Go, or Java.
• Proficiency in backend development concepts, REST APIs, and secure software design principles.
• Deep understanding of DevSecOps methodologies, including secure SDLC, shift-left security, and CI/CD integration.
• Hands-on experience with security tools such as Snyk, Checkov, SonarQube, OWASP ZAP, or similar for static/dynamic/code dependency analysis.
• Proven experience using Infrastructure as Code (IaC) with Terraform to build and manage cloud infrastructure (especially in AWS).
• Solid knowledge of cloud-native security practices and AWS services (IAM, KMS, VPC, Security Hub, GuardDuty, etc.).
• Strong analytical and problem-solving skills, with an ability to debug complex systems and identify root causes quickly.
• Excellent collaboration and communication skills, with experience working in cross-functional DevOps, development, or platform teams.
• AWS Certified Associate-level or higher certification (e.g., Solutions Architect, Developer, or Security Specialty) is required.
• Additional certifications such as HashiCorp Certified: Terraform Associate, CISSP, or Kubernetes certifications (CKA, CKS) are a plus.