Role Description We’re looking for a DevSecOps Lead to embed security into the way we build, deploy, and operate our technology. You’ll lead DevSecOps across Ajaib’s engineering and security organisations. This is a hands-on leadership role focused on making security an integrated and automated part of the software-development lifecycle. You’ll work closely with engineering, platform, infrastructure, application security, cloud, and operations teams to build secure delivery pipelines, strengthen cloud controls, and reduce risk without slowing down releases. You’ll define the DevSecOps roadmap, improve security automation, and help engineering teams adopt secure practices across applications, infrastructure, containers, and cloud environments. What you’ll do - Define and lead Ajaib’s DevSecOps strategy, roadmap, standards, and operating model - Embed security controls throughout the software-development lifecycle - Integrate security testing into CI/CD pipelines across applications, services, and infrastructure - Implement and improve SAST, DAST, software-composition analysis, secrets detection, container scanning, and infrastructure-as-code scanning - Build automated security guardrails that help teams identify and resolve issues early - Partner with engineering and platform teams to improve the security of build, deployment, and release processes - Strengthen security across cloud environments, containers, Kubernetes, APIs, backend services, and internal platforms - Establish secure infrastructure-as-code practices and reusable security patterns - Improve identity, access, secrets, keys, and privileged-access controls across engineering environments - Define secure configuration baselines for cloud services, containers, workloads, and deployment platforms - Automate vulnerability identification, prioritisation, assignment, remediation tracking, and verification - Work with application security and engineering teams to reduce false positives and make security findings actionable - Support threat modelling, architecture reviews, and security assessments for new systems and platforms - Improve logging, monitoring, alerting, and detection across development and production environments - Partner with incident-response teams to strengthen readiness, containment, recovery, and post-incident improvements - Assess and improve software-supply-chain security, including dependencies, artefacts, build systems, and third-party components - Define DevSecOps metrics and provide clear reporting on security coverage, risk, and remediation progress - Build security knowledge across engineering teams through documentation, training, tooling, and practical guidance - Mentor DevSecOps and security engineers and help grow the function as Ajaib scales Qualifications - Strong experience in DevSecOps, cloud security, platform security, security engineering, or infrastructure security - Experience leading DevSecOps programmes, technical initiatives, or security-engineering teams - Hands-on experience building and securing CI/CD pipelines - Strong knowledge of cloud security, containers, Kubernetes, infrastructure as code, and modern software-delivery practices - Experience implementing security tools such as SAST, DAST, software-composition analysis, secrets scanning, container scanning, and infrastructure-as-code scanning - Strong understanding of software-supply-chain security and secure build practices - Experience with cloud platforms such as AWS, Google Cloud, or Azure - Experience with tools such as Terraform, Kubernetes, Docker, GitHub Actions, GitLab CI, Jenkins, or similar technologies - Ability to write automation and integrations using languages such as Python, Go, Bash, or JavaScript - Strong understanding of identity and access management, secrets management, encryption, key management, and privileged access - Experience managing vulnerabilities across applications, cloud environments, infrastructure, and third-party components - Understanding of secure software-development practices, threat modelling, and application-security principles - Ability to translate security requirements into practical engineering controls and automated workflows - Strong communication and stakeholder-management skills - Strong written and spoken English Nice to have - Previous experience within fintech, banking, brokerage, payments, investment, or cryptocurrency platforms - Experience securing high-availability or highly regulated financial systems - Familiarity with policy-as-code tools and automated compliance controls - Experience with cloud-native security tooling and runtime protection - Knowledge of service meshes, microservices, API gateways, and distributed architectures - Experience with security-information and event-management platforms and cloud-security monitoring - Familiarity with frameworks and standards such as NIST, CIS Benchmarks, ISO 27001, or PCI DSS - Experience building a DevSecOps programme in a fast-growing organisation - Certifications such as CISSP, CCSP, CSSLP, CKS, AWS Security Specialty, or equivalent Why join - High-impact ownership: shape how security is embedded across Ajaib’s engineering and delivery practices - Meaningful technical challenges: secure cloud platforms, CI/CD pipelines, containers, applications, and financial systems - Real influence: partner directly with engineering and platform teams to improve how technology is built and operated - Security at scale: create automation and guardrails that protect the business as it grows - Leadership opportunity: define DevSecOps standards, mentor engineers, and help build a strong security-engineering culture - Meaningful mission: help protect customers, investments, personal data, and financial transactions Notes to Applicants - Interviews may include technical, leadership, and DevSecOps scenario discussions. You may be asked to review a delivery pipeline, assess a cloud architecture, design an automated security control, or explain how you would introduce security without slowing down engineering teams. - Please do not include confidential information, customer data, source code, credentials, security findings, or proprietary details from current or previous employers during the interview process. - If you need accommodations at any stage of the recruitment process, please let us know in your application.

• Design, implement, and manage cloud infrastructure using Infrastructure as Code (IaC) tools such as Terraform and Ansible, OCI Resource Manager. • Develop and maintain IaC scripts to automate the provisioning, configuration, and deployment of cloud environments. • Provision and secure micro-segmented virtual cloud networks in “hub and spoke” topologies. • Deploy and manage virtual machines, applications, and databases in OCI using services like Compute and Block Storage. • Secure application traffic flow using OCI Security Lists and Network Security Groups (NSG). • Secure access to cloud objects using OCI compartments and Identity and Access Management (IAM) policies. • Collaborate with application engineering teams to ensure seamless integration of cloud infrastructure with application development and deployment pipelines. • Monitor and optimize cloud infrastructure performance, security, and cost-efficiency. • Monitor and manage operating systems within the OCI environment. • Implement CI/CD pipelines to automate the build, test, and deployment processes. • Troubleshoot and resolve issues related to cloud infrastructure and IaC scripts. • Stay up to date with the latest cloud technologies and best practices. • Ensure security and compliance standards are met across all deployments.

Role Description We are looking for a contractor with experience in mobile and cloud infrastructure to support our pre-launch platform work. Key areas include: - Mobile Production Readiness: Ensuring the end-to-end mobile release pipeline is production-ready, including App Store and Play Store compliance, staged rollout configuration for both Apple and Android, rollbacks, and environment validation across dev, staging, and production. - Observability & Monitoring: Completing mobile monitoring and alerting in Datadog ahead of launch (crash alerting, performance thresholds, dashboards). Extending coverage to website and BFF projects as needed. - GitHub Actions Automation for Vercel Deployments: Automating manual deployment steps for Vercel-hosted applications including the website, mobile BFF, and two Vercel deployed services currently lacking full CI/CD coverage. - Infrastructure as Code (Pulumi): Codifying Vercel, GCP, and Datadog infrastructure currently managed manually. Includes environment configuration, IAM, Firebase/FCM setup, and establishing repeatable patterns for other engineers to self-serve. - CI/CD Standardization: Establishing shared GitHub Actions workflows across repos, implementing automated branching, changelog generation, and deployment notifications. Experience building reliable, deterministic automation is essential — the team needs consistency across services. - Secret Rotation: Implementing automated secret rotation across GitHub Actions and EAS to eliminate manual token management and prevent pipeline failures due to expired credentials. - Dependency Management: Experience managing dependency hygiene at scale. - Security Practices: Platform-level security hygiene including secrets management, least privilege IAM, and dependency vulnerability scanning/updates. - Experience: - Expo/React Native mobile pipelines (EAS, App Store Connect and Google Play API) - Datadog instrumentation - GitHub Actions at scale - Pulumi or equivalent IaC tooling - Vercel deployment workflows and feature flag platforms (Optimizely) - Comfortable inheriting and evaluating existing infrastructure: Rather than building from scratch — we have a significant amount already in place and are looking for someone who can assess, validate, and extend what exists rather than starting over. - Familiarity with: App Store and Google Play submission processes is a plus. - SRE experience: Including SLO definition, alerting strategy, and production observability is a nice to have. Qualifications - Expert Level experience required. Requirements - This is a Contract position based out of Detroit, MI. Benefits - Medical, dental & vision - Critical Illness, Accident, and Hospital - 401(k) Retirement Plan – Pre-tax and Roth post-tax contributions available - Life Insurance (Voluntary Life & AD&D for the employee and dependents) - Short and long-term disability - Health Spending Account (HSA) - Transportation benefits - Employee Assistance Program - Time Off/Leave (PTO, Vacation or Sick Leave) Application Deadline This position is anticipated to close on Jul 24, 2026.

• Design, build, and maintain scalable, resilient data and ML pipelines, infrastructure, and workflows using tools such as Terraform, GitHub Actions, ArgoCD, Helm, and others. • Automate infrastructure provisioning and configuration management using cloud-native services (preferably AWS) with tools like Terraform, CloudFormation. • Design, containerize, and manage Kubernetes (EKS) clusters and/or ECS environments in AWS. • Collaborate with development teams to optimize performance, deployment, and cost. • Partner with DevOps and SRE teams to ensure high availability, observability, scalability, and security of the data and ML infrastructure. • Work closely with Data Scientists and ML Engineers to operationalize machine learning models, including building CI/CD pipelines for model training, validation, and deployment. • Implement observability for data pipelines and ML services using tools like Prometheus, Grafana, Datadog, or similar. • Develop and maintain automated pipelines for model retraining, monitoring drift, and versioning in production. • Support experimentation and prototyping in areas such as Machine Learning and Generative AI, transitioning successful prototypes into production systems. • Ensure cloud infrastructure is secure, compliant, and cost-efficient, following best practices in governance, identity, and access management.