Hi,
#Xebia is Hiring for DevSecOps Lead with 15+ years of experience in IT industry
Location- Abu Dhabi
Passport is Mandatory
Role Summary
We are seeking a highly experienced and hands-on DevSecOps Lead to design, implement, and govern an automated, secure, and scalable CI/CD pipeline supporting Digital Agile Release Train (ART) delivery.
This role requires deep technical expertise across DevOps, cloud, security, and release engineering, combined with strong stakeholder leadership capabilities.
The DevSecOps Lead will not only define strategy but also actively architect and implement solutions.
Key Responsibilities
1. DevSecOps Strategy & Architecture
- Define and implement an end-to-end DevSecOps strategy aligned with Agile Release Train delivery.
- Architect and standardize CI/CD pipelines across multiple digital products and platforms.
- Establish DevSecOps governance, controls, and best practices across teams.
- Embed security controls (Shift Left) within development and deployment pipelines.
2. CI/CD & Release Automation
- Design and implement automated build, test, security scan, and deployment pipelines.
- Integrate automated unit, integration, regression, performance, and security testing into CI/CD workflows.
- Enable environment provisioning through Infrastructure as Code (IaC).
- Drive release orchestration, version control, branching strategies, and rollback mechanisms.
- Optimize deployment frequency while ensuring reliability and compliance.
3. Security & Compliance Integration
- Implement SAST, DAST, SCA, container security, and secrets management in pipelines.
- Ensure secure API lifecycle management.
- Establish DevSecOps metrics and compliance reporting dashboards.
- Collaborate with InfoSec and Risk teams to align with regulatory and enterprise security standards.
4. Cloud & Infrastructure Enablement
- Lead automation across cloud environments (AWS/Azure/GCP).
- Implement containerization and orchestration strategies (Docker, Kubernetes).
- Optimize scalability, resilience, and cost-efficiency of environments.
- Establish monitoring, observability, and logging frameworks.
5. Stakeholder & Program Leadership
- Act as the primary DevSecOps SME across Business and Technology.
- Collaborate with Enterprise Architects to align pipelines with long-term architecture vision.
- Engage senior business stakeholders to communicate risks, trade-offs, and roadmap priorities.
- Lead cross-functional teams and mentor DevOps engineers.
Required Technical Expertise
- Deep hands-on experience with CI/CD tools (e.g., Jenkins, GitHub Actions, GitLab CI).
- Strong scripting and automation skills (Python, Bash, PowerShell).
- Experience with Infrastructure as Code.
- Containerization & orchestration (Docker, Kubernetes).
- Experience implementing DevSecOps controls and security scanning tools (SonarQube, Fortify, etc.).
- Cloud-native architecture knowledge (AWS/Azure).
- Experience with API gateway integrations and microservices architectures.
- Strong understanding of branching strategies and Git workflows.
Leadership & Behavioral Competencies
- Ability to operate at both strategic and hands-on technical levels.
- Strong stakeholder management and executive communication skills.
- Experience working within large-scale Agile/SAFe environments.
- Proven ability to influence cross-functional teams without direct authority.
- Strong problem-solving and systems-thinking mindset.
- Ability to drive cultural transformation toward DevSecOps adoption.
Preferred Qualifications
- SAFe DevOps certification
- AWS/Azure Architect certifications
- CISSP / Security certifications (desirable)
Experience in Digital, eCommerce, or Airline/Travel platforms (preferred)
