The posting
Responsibilities
- Develop automation and processes to enable application teams to deploy, manage, scale and monitor their applications on the case management application platform (built on OutSystems)
- Take ownership of platform-level solutions, and coordinate with the infrastructure team on hosting, network and infrastructure issues
- Manage platform configuration, including user and role management, access control, integration endpoints (e.g. APIs, SSO) and platform settings
- Own the CI/CD pipelines and release management process for applications hosted on the case management platform, including deployment plans, versioning and rollback, and approve production release readiness
- Implement platform and application observability (metrics, logs, traces) with defined SLIs/SLOs, dashboards and alert tuning, and report availability and performance against service levels
- Deploy and manage platform and application monitoring for performance, availability, errors and usage, and identify bottlenecks to maximise service availability
- Conduct performance and load testing, capacity planning and performance tuning with application teams to keep the case management platform responsive under enterprise workloads
- Lead system troubleshooting and problem solving across platform and application domains, run incident and problem management including root cause analysis and post-incident reviews, and lead on-call escalations for customer facing issues
- Support business continuity at the platform level, including application backup, restore and disaster recovery testing, in coordination with the infrastructure team
- Track and report OutSystems licence utilisation (e.g. application objects, users, environments) to support central governance and license cost optimisation
- Implement and maintain platform and application security controls, such as secure configuration, secrets management and access policies
- Perform threat and risk assessments at the platform and application level, and apply secure configuration profiles
- Employ best practices when implementing security controls within the platform and applications
- Implement security practices that comply with standards (e.g. IM8) to protect the organisation’s data and applications
- Maintain security and compliance evidence for ICT&SS / IM8 and the System Security Plan (SSP), such as configuration baselines, access reviews, scan results and change records
- Extend CI/CD pipelines and environment controls to promote agentic AI components (e.g. agent configurations, prompts, guardrail settings) consistently with the same approvals, scanning and rollback as application releases
- Provide technical guidance and peer review to other DevSecOps engineers and relevant application teams
Experience and Skills Needed
- Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines.
- At least 4 years of experience relevant to DevSecOps engineering, preferably at the application platform level
- Experience operating the OutSystems platform (O11 or OutSystems Developer Cloud), including LifeTime deployment, environment management and platform monitoring
- Passion for automation, standardisation and best practices
- Excellent understanding of Software Development Life Cycle, Test Driven Development, Continuous Integration and Continuous Delivery
- Experience supporting high availability, high performance and high security applications in cloud and hybrid environments
- Demonstrable skills in scripting languages such as Bash, PowerShell or Python
- Experience with version control systems such as Git
- Experience with cloud platforms such as GCC (e.g. AWS, Azure, Google Cloud)
- Ability to troubleshoot complex issues ranging from platform configuration to application stack traces
- Experience with application performance monitoring and logging tools (e.g. OutSystems monitoring, Elastic, Grafana, CloudWatch)
- Knowledge of application security testing tools (e.g. HP Fortify, SonarQube, Sonatype Nexus IQ) and secure coding practices
- Knowledge of platform-level backup, restore and disaster recovery
- Knowledge of container technologies such as Docker, Kubernetes
- Experience with DevOps toolset like GitLab, JIRA, BitBucket, Confluence
- Working knowledge of Government ICT&SS management policies (IM8) and SSP requirements, and has applied them to security controls, monitoring and release processes
- Experience with observability practices (SLIs/SLOs, distributed tracing, alert design, e.g. OpenTelemetry) and performance testing tools (e.g. JMeter, k6)
- Comfortable with Agile methodologies and working closely with product development teams
- Strong on collaboration and communication including documentation
Added Advantage
- OutSystems certifications
- Experience with security assessments pertaining to government projects
- Worked for an organisation which succeeded DevSecOps transformation
- Basic understanding of network infrastructure and Linux, to work effectively with the infrastructure team



