DevSecOps Engineer (IGT1)

Company Description

About IGT1:

IGT1 is a rapidly growing offshore technology and talent solutions company based in Port City Colombo. We are a fully owned subsidiary of IGT I Holdings Sweden AB, funded by the three of world’s leading private equity firms; EQT Group, Hg, and TA Associates and also a sister company of IFS.

At IGT1, we partner with global businesses to provide them with an operation that maximizes efficiency, spurs growth, allows them to develop and deliver world-class product and services, and create long-term value. Our people-first culture champions diversity, teamwork, and continuous learning, creating an environment where talent thrives. 

With a team of over 500 professionals and counting, we are always looking for passionate, skilled individuals who want to make a global impact while being part of something extraordinary. 

Through our offshore collaboration model, you'll be embedded within the team of one of our esteemed international clients, contributing directly to high-impact, enterprise-level initiatives. 

About the Client: Kyriba

Kyriba is the global leader in cloud-based finance solutions, empowering CFOs and their teams to transform how they activate liquidity as a dynamic, real-time vehicle for growth and value creation. Our award-winning SaaS platform delivers comprehensive treasury, risk management, payments, and supply chain finance capabilities that enable companies to optimize their working capital and enhance financial performance.

About the role: 

As a member of the Cloud Operations organization, you will be working on the DevSecOps and Cloud Compliance Team responsible for bridging global cyber security policies with cloud infrastructure execution across Kyriba’s SaaS platform. This role serves as the technical execution arm for cloud security, ensuring that Zero-Trust architecture, automated guardrails, network security, and regulatory compliance standards are seamlessly integrated into our engineering workflows without slowing down deployment velocity.

Success in this position requires strong technical skills that combine deep cloud networking and security experience with the ability to learn the Kyriba application. You will support a "Policy as Code" approach, building the paved roads that allow R&D and Platform Engineering to ship rapidly while maintaining an airtight security, network, and compliance posture.

Job Description

• Fully own the day-to-day infrastructure support and operations of the Kyriba SaaS platform - we run our business 24x7x365 across multiple locations, time zones and languages
• Create internal automation, monitoring, deployment and testing tools
• Participate in continuous improvement of the existing process, methodologies, technologies and practices
• Effectively work with team members across multiple geographies
• Orchestration and deployment of virtualized infrastructure and services in a public cloud environment using Infrastructure as code
• Implement and maintain certificate lifecycle management and automation
• Maintain cloud security posture including IAM, network security, and compliance guardrails
• Manage global DNS infrastructure
• Support regulatory compliance (SOC 1 & 2, ISO 27001, SWIFT, etc)
• Automate and maintain documentation, evidence, and security controls required for compliance certifications

Qualifications

• Degree in Computer Science, Cybersecurity, Software Engineering or related discipline
• At least 3+ years of solid track record of working on a DevSecOps, Cloud Security, or Systems Engineering team
• Hands-on experience with cloud platforms (AWS, Azure, GCP) with a focus on IAM, networking, security boundaries, and managed services.
• Strong background in network security, DNS, firewalls (handling FCRs), and SSL/TLS certificate lifecycle automation.
• Experience with Infrastructure-as-Code (Terraform, CloudFormation) and Policy-as-Code paradigms.
• Experience implementing technical controls for regulatory frameworks (SOC 1 & 2, ISO 27001, SWIFT).
• Familiarity with CI/CD pipeline automation and integrating security tools (SAST/DAST/SCA) into software delivery lifecycles.
• Ability to work effectively across multiple geographies and time zones.
• Effective communication skills in English, both verbal and written.

Additional Information

We champion flexibility and hybrid work options to support varying lifestyles and personal needs. At the same time, we value the power of in-person collaboration to build community, spark innovation, and strengthen connections. Our approach ensures you can work in ways that suit you best while still engaging with colleagues to share ideas and grow together. #LI-Hybrid #LI-DNP