Fresh Jobs at Heirs Holdings – Apply Now

The Role

• The DevSecOps Evangelist is the cultural and educational force behind this platform’s engineering standards. Where the DevSecOps Engineers build and operate the pipelines, you make sure every engineer across every team understands, embraces, and actively applies the practices those pipelines enforce. You sit across all five delivery lanes — Architect, Develop, Secure, Ship, and Support — and your mandate is to make DevSecOps the instinct, not the instruction. This is a critical, cross-functional role for someone who is as technically credible as they are compelling.

What You’ll Do

• DevSecOps Culture & Strategy — Own the platform’s DevSecOps culture programme — defining what engineering excellence looks like across security, quality, automation, and delivery speed, and building the strategy to embed it across every team. Work with the Platform Manager to align the culture programme with platform delivery goals and make DevSecOps the shared operating philosophy of the entire engineering organisation.
• Education & Enablement — Design and deliver a continuous engineering enablement programme — including workshops, onboarding sessions, lunch-and-learns, and hands-on labs — that brings every engineer on the platform up to and beyond the DevSecOps standard. Partner closely with the DevSecOps Engineers to translate technical pipeline controls into accessible, actionable learning. No engineer should ever cite lack of knowledge as the reason a standard was missed.
• Standards Stewardship — Own the platform’s DevSecOps standards documentation — maintaining it as a living, accessible, and authoritative reference for how engineering is done on this platform. Ensure documentation covers CI/CD pipeline usage, security gate requirements, IaC practices, container standards, secrets handling, and dev container setup. Make it clear, opinionated, and easy to follow.
• Pipeline & Tooling Adoption — Drive active adoption of the platform’s CI/CD tooling, security gates, AI-powered code review and testing agents, and developer environment standards across all engineering teams and contributors. Identify adoption gaps early, work with the DevSecOps Engineers to remove friction, and track adoption rates to ensure no team is operating outside the standard.
• Shift-Left Security Advocacy — Champion the principle that security is everyone’s responsibility and belongs at the beginning of every development conversation — not the end. Run targeted security awareness initiatives across engineering teams. Work with the Platform Manager (Security) to translate security requirements into engineering habits, and ensure every contributor understands the security implications of the code they write.
• DORA Metrics & Maturity Tracking — Track, baseline, and report on DevSecOps adoption and engineering maturity across the platform — using DORA metrics (deployment frequency, lead time, change failure rate, MTTR) and qualitative signals from team engagement. Identify teams and practices that need targeted support and use data to demonstrate the impact of the culture programme over time.
• Community of Practice — Build and run a DevSecOps community of practice across the engineering organisation — creating the forums, rituals, and channels through which engineers share learnings, surface problems, celebrate wins, and continuously raise the standard together. Keep the community active, inclusive, and technically grounded.
• Innovation & Emerging Practices — Continuously track the evolving DevSecOps landscape — including AI-assisted development tools, emerging pipeline security standards, supply chain frameworks, and industry best practices. Identify and pilot innovations that could meaningfully raise the platform’s engineering standards, and build the case for adoption where the evidence supports it.
• Cross-functional Influence — Operate across all five delivery lanes — Architect/Design, Develop, Secure, Ship, and Support — building trust and credibility with every team on the platform. You are not a gatekeeper; you are a force multiplier. Your influence should make the teams around you faster, safer, and more confident in how they build.
• Executive Reporting — Report regularly to the Platform Manager on the state of DevSecOps adoption, culture programme progress, maturity trends, and areas of concern. Provide clear, evidence-based narratives that allow leadership to understand where the platform’s engineering culture is strong and where focused investment is needed.

What We’re Looking For

Must Have

• 5+ years of experience in software engineering or DevSecOps, with a strong enough technical foundation to teach, guide, and credibly challenge engineers across architecture, cloud, pipelines, and security.
• Proven experience driving engineering culture change in a large, complex organisation — shifting mindsets, embedding new practices, and sustaining adoption beyond initial rollout.
• Deep familiarity with CI/CD pipelines and DevSecOps tooling — GitHub Actions, Azure DevOps Pipelines, GitLab CI, or Jenkins — and the ability to explain them clearly to engineers at every level of experience.
• Strong working knowledge of shift-left security principles and the tooling that enforces them — SAST, DAST, SCA, secrets detection, container scanning (Trivy), and dependency vulnerability management (Snyk).
• Excellent communication, facilitation, and teaching skills — you can hold a room, run a workshop, write documentation that people actually read, and make complex technical concepts accessible without oversimplifying them.
• Hands-on experience with Infrastructure as Code (Terraform, Ansible, Bash), containerisation (Docker), and cloud-native development practices — you must understand what you are evangelising.

Nice to Have

• Experience with DORA metrics, DevOps maturity models, or engineering effectiveness frameworks — and a track record of using data to demonstrate cultural and process improvement.
• Familiarity with AI-assisted development and testing tools — including AI code review agents, AI-powered test generation, and their integration into CI/CD pipelines.
• Public presence in the DevSecOps or engineering community — conference speaking, technical writing, open-source contributions, or community leadership.
• Experience in fintech, banking, or a regulated environment — with an understanding of how compliance requirements shape engineering practice.
• AWS and/or Microsoft Azure certification — any track relevant to cloud-native development or DevOps.

go to method of application »

The Role

• The Platform Manager is the operational engine of this platform. Reporting to the Platform Director, you will own the day-to-day delivery, health, and standards compliance of the entire engineering platform. You will lead the platform’s engineering teams, run its operations, and be the single accountable owner for how well this platform performs, ships, and scales. This is a critical, high-ownership role for a leader who thrives in complexity and holds themselves and their teams to the highest standards.

What You’ll Do

• Standards & Patterns — Working closely with the Enterprise Architect and architecture team, translate architectural guidance into concrete engineering and delivery standards, patterns, and practices. Own their rollout, enforcement, and continuous improvement across all teams and contributors.
• DevSecOps Pipeline Ownership — Oversee and actively participate in the design, implementation, and governance of world-class DevSecOps pipelines — ensuring every service ships through automated, security-gated pipelines with zero direct production access by any engineer.
• Team Leadership & Recruitment — Recruit, onboard, orient, and lead the platform’s key engineering roles — architects, cloud and database engineers, DevSecOps, security, and SRE. Build a high-performing, standards-compliant team and create the conditions for them to do their best work.
• SRE & Incident Management — Own the platform’s Site Reliability Engineering function end-to-end — defining and enforcing standards for rapid incident identification, triage, troubleshooting, and resolution. Design, build, and run a 24/7 Network & Security Operations Centre (NSOC) that ensures the platform is always visible, always monitored, and always recoverable.
• Observability — Establish and enforce world-class observability standards across all platform services — ensuring every team maintains deep, consistent visibility into the behaviour and performance of their services from day one in production.
• Operational Excellence — Coach engineering teams on standards adherence and delivery best practice. Track, baseline, and report on DORA metrics and platform KPIs — holding teams accountable to continuous improvement and ensuring the Platform Director has accurate, timely delivery intelligence at all times.
• Change Management — Own the platform’s change control process — including the Change Advisory Board (CAB), release gate approvals, and production promotion workflows. No change touches production without passing the bar.
• Security Ownership — Own the platform’s security posture across all engineering teams and workstreams. Working hand-in-hand with the Platform Manager (Security), ensure that security standards are properly defined, implemented, and strictly enforced at every layer — from pipeline to production.
• Cost & Capacity — Own platform cloud cost stewardship — monitoring spend, eliminating waste, and reporting on efficiency. Work with architects to anticipate capacity requirements and ensure the platform can absorb growth before it is needed, not after.
• Dependency Management — Identify, track, and resolve cross-team dependencies and blockers with urgency — protecting team velocity and ensuring no team is held up by another longer than is absolutely necessary.
• Partner & Contractor Onboarding — Oversee the end-to-end onboarding of engineering partners and contractors — ensuring due diligence is complete, access is provisioned on a least-privilege basis with MFA enforced, and every contributor is oriented to platform standards before they write a single line of code.
• Executive Support — Represent the platform in key leadership forums, including ExCo and board-level meetings when required. Translate platform delivery status into clear, confident executive narratives.

What We’re Looking For

Must Have

• 8+ years of hands-on software engineering experience, with a strong foundation in backend development, microservices architecture, and distributed systems — you must be able to speak the language of every team you lead.
• Proven experience leading and scaling multi-disciplinary engineering teams across architecture, cloud infrastructure, DevSecOps, and SRE — with a track record of recruiting, developing, and holding high-performing engineers to the highest standards.
• Deep practical knowledge of DevSecOps pipeline design and governance — including CI/CD tooling (GitHub Actions, Azure DevOps Pipelines, GitLab CI, or Jenkins), container security (Docker, Trivy, Falco, Snyk), and security gate implementation (SAST, DAST, SCA, secrets detection).
• Solid cloud infrastructure experience across AWS and/or Azure — including managed services, private networking, zero-trust architecture, and Infrastructure as Code (Terraform, Ansible, and Bash).
• Hands-on familiarity with the core platform stack: microservices, containerisation (Docker), API gateways (Kong or equivalent), event-driven messaging (RabbitMQ, Azure Service Bus, or Amazon SQS), caching (Redis), and relational databases (PostgreSQL).
• Strong command of SRE principles and incident management — including NSOC design, on-call frameworks, observability tooling (centralised logging, metrics, distributed tracing), SLOs/SLAs, and post-incident review processes.
• Confident executive presence — able to represent the platform credibly at ExCo and board level and translate complex technical delivery into clear business narrative.

Nice to Have

• Familiarity with CBN guidelines, PCI DSS, and data protection regulations applicable to financial services in African markets.
• Experience designing and operating a 24/7 NSOC or SOC in a regulated financial services environment.
• Working knowledge of cloud cost management tooling and FinOps practices.

go to method of application »