Senior SecOps Engineer

About the role

Advansys is looking for a Senior SecOps Engineer to act as the technical subject matter expert for cloud and solutions security, supporting presales and delivery engagements on network security, firewalls and DevSecOps. The role covers security architecture design, technical governance and hands-on implementation guidance across customer environments.

Key responsibilities

• Lead the design and review of secure cloud and hybrid architectures: network segmentation, Zero Trust, IAM, WAF, SIEM/SOAR.
• Own firewall and network security architecture design, sizing and migration, including HA/failover, VPN and segmentation.
• Design and implement DevSecOps pipelines: security-as-code, SAST/DAST/SCA integration and policy-as-code.
• Apply cloud security best practices to protect applications, data and infrastructure across IaaS/PaaS/SaaS.
• Provide presales support: SME sessions, security assessments, proposals and statements of work.
• Support incident response, threat detection and vulnerability management.
• Contribute to security governance: compliance mapping (ISO 27001, NIST, CIS Benchmarks), risk assessments and client security reviews.
• Maintain the SecOps knowledge base, policies and playbooks, and mentor mid-level SecOps engineers.

Required profile

• Bachelor's degree in Computer Science, Engineering or a related field.
• 6+ years of hands-on experience in cloud/network security, with SME-level depth in at least two of: network security, firewalls, DevSecOps.
• Proven expertise with enterprise firewall platforms (FortiGate, Palo Alto, Check Point or similar).
• Certificates: Fortinet NSE4+ or Palo Alto PCNSE (or equivalent), plus a cloud security certification (AWS/Azure/GCP Security Specialty) or CISSP/CCSP.

Required skills

• Cloud security controls: WAF, IAM, SCPs, Secrets Management, KMS, CASB, DLP, SIEM/SOAR on AWS, Azure and/or GCP.
• Infrastructure as Code and Security as Code (Terraform, CloudFormation, Azure ARM).
• Network security fundamentals: VPNs, IDS/IPS, micro-segmentation, Zero Trust.
• Container/Kubernetes security and CI/CD pipeline integration (SAST/DAST/SCA).
• Compliance frameworks: ISO 27001, SOC 2, GDPR, CIS Benchmarks.
• Automation and scripting (Python, Bash or PowerShell).