DevSecOps Engineer – Onsite in Kathmandu

About the role

We are looking for a DevSecOps Engineer to join our client’s team in Kathmandu on a full‑time, on‑site basis. You will be responsible for securing a production platform that serves students in 23 countries, covering application code, cloud infrastructure, and vendor deliveries.

Key responsibilities

• Design and execute application security programs including threat modelling, SAST/DAST, code reviews and vulnerability management.
• Harden AWS environments and Kubernetes/EKS clusters – IAM, VPC, KMS, RBAC, network policies, GuardDuty, Security Hub and WAF.
• Manage container supply‑chain security – ECR image scanning, signing and secrets handling.
• Secure CI/CD pipelines using GitHub Actions, Docker and OIDC credentials.
• Implement AI/LLM workload safeguards such as data‑to‑model boundaries and prompt‑injection protection.
• Drive governance initiatives – ISO 27001 readiness, policy creation and vendor security assessments.

Required profile

• 4+ years of DevOps, infrastructure or security experience, with at least 2 years dedicated to security responsibilities.
• Deep hands‑on expertise with AWS and its security services.
• Proven production‑grade Kubernetes/EKS security implementation.
• Experience securing CI/CD pipelines and container environments.
• Proficiency with Terraform or CloudFormation and scripting in Python or Bash.
• Willingness to work onsite in Kathmandu five days a week.

Required skills

• AWS (IAM, VPC, KMS, GuardDuty, Security Hub, WAF)
• Kubernetes & Amazon EKS
• Terraform / CloudFormation
• Python, Bash
• GitHub Actions, Docker, Amazon ECR
• SAST, DAST, VAPT
• ISO 27001 controls