DevSecOps Engineer (IGT1) – Cloud Security & Compliance

About the role

IGT1, an offshore technology and talent solutions company based in Port City, Colombo, is hiring a DevSecOps Engineer for its client Kyriba, a global provider of cloud-based finance solutions. As part of the Cloud Operations organization's DevSecOps and Cloud Compliance team, you will bridge global cyber security policies with cloud infrastructure execution across Kyriba's SaaS platform, embedding Zero-Trust architecture, automated guardrails, network security and compliance standards into engineering workflows.

Key responsibilities

• Own the day-to-day infrastructure support and operations of the Kyriba SaaS platform, which runs 24/7 across multiple locations, time zones and languages.
• Create internal automation, monitoring, deployment and testing tools.
• Contribute to continuous improvement of processes, methodologies, technologies and practices.
• Work with team members across multiple geographies.
• Deploy and manage virtualized infrastructure and services in a public cloud using Infrastructure as Code.
• Maintain certificate lifecycle management and automation.
• Keep the cloud security posture strong, covering IAM, network security and compliance guardrails.
• Manage global DNS infrastructure.
• Support regulatory compliance (SOC 1 & 2, ISO 27001, SWIFT, etc.) and automate the documentation, evidence and security controls needed for compliance certifications.

Required profile

• Degree in Computer Science, Cybersecurity, Software Engineering or a related discipline.
• At least 3 years of hands-on experience on a DevSecOps, Cloud Security or Systems Engineering team.
• Ability to work across multiple geographies and time zones, with effective English communication.

Required skills

• Cloud platforms (AWS, Azure, GCP) with a focus on IAM, networking, security boundaries and managed services.
• Network security, DNS, firewalls (FCRs) and SSL/TLS certificate lifecycle automation.
• Infrastructure-as-Code (Terraform, CloudFormation) and Policy-as-Code.
• CI/CD pipeline automation and integration of security tools (SAST/DAST/SCA).

The employer offers flexible and hybrid work options.