At AIA we've started an exciting movement to create a healthier, more sustainable future for everyone.

If you believe in developing a better tomorrow, read on.

About the Role

The Cloud & DevSecOps Engineer is a midlevel technical role responsible for designing, building, securing, and operating Azure cloud platforms and CI/CD pipelines. The role carries ownership of defined technical domains and DevSecOps capabilities, including the creation and maintenance of engineering policies, standards, and automated controls aligned with security and compliance requirements. The position requires strong handson technical skills, the ability to independently own outcomes, and close collaboration with application teams, senior engineers, architects, and security stakeholders.

Roles and Responsibilities:

Design, deploy, and operate Azure cloud services used by application and delivery teams, including handson implementation and operational ownership of:
- Azure Kubernetes Service (AKS)
- App Service
- Azure Functions
- Azure Virtual Machines
- Supporting Azure cloud components
Ensure Azure services are reliable, secure, and configured in accordance with internal standards, and can be consistently consumed by downstream teams.
Design, implement, and maintain CI/CD pipelines using Azure DevOps, GitHub Actions, and related tooling to ensure delivery pipelines are secure, scalable, and auditable.
Define, document, and evolve DevSecOps policies and engineering standards, including:
Develop and maintain automation and pipeline templates, including reusable modules and configuration standards, to ensure infrastructure deployments comply with security and operational requirements.
Apply automation to daytoday operations, validation checks, and compliance activities using appropriate scripting and tooling.
Implement and maintain secure cloud environments aligned with organizational security requirements by applying Azure security best practices related to:
- Identity and access management
- Network security
- Private connectivity
- Configuration hardening
Work closely with Security and Compliance stakeholders to support assessments and reviews, remediate findings through engineering improvements, and continuously strengthen the security posture of cloud platforms and delivery pipelines.
Monitor platform health, performance, and availability using observability tools such as Dynatrace.
Perform root cause analysis of platform incidents and CI/CD pipeline failures, and proactively implement improvements to system resilience.
Maintain clear technical documentation, runbooks, and architectural artefacts to support operational continuity and knowledge sharing.

Minimum Job Requirements:

Technical Experience

3-4 years of experience in cloud, DevOps, or DevSecOps engineering roles
Strong handson experience operating Microsoft Azure in production environments
Proven experience designing and supporting CI/CD pipelines using GitHub Actions and Azure DevOps
Strong scripting and automation skills (Python, Bash, or equivalent)

DevSecOps & Platform Engineering

Experience embedding security controls into pipelines and infrastructure
Demonstrated ownership of technical standards, platform patterns, or engineering policies
Ability to translate security and compliance requirements into automated engineering solutions

Tools & Platforms

GitHub and Azure DevOps (Repos, Pipelines, Artifacts)
Gitbased source control and workflows
Dynatrace or similar monitoring and observability tools
Collaboration and documentation tools (e.g., JIRA, Confluence)