DevOps Security Architect

Abouts us:

ARRISE sets the benchmark for service delivery and excellence in the iGaming industry. Playing a key role in the success of its clients, which include Pragmatic Play, a brand relied upon by the world’s biggest online casinos for its cutting-edge products, ARRISE helps to deliver exceptional gaming experiences to millions of players worldwide.

Our global team of over 6,000 talented and driven professionals are shaping the future of iGaming. Headquartered in Gibraltar, we have offices spanning Canada, India, the Isle of Man, Latvia, Malta, Romania, Serbia, Bulgaria, and the UAE, and more exciting destinations on the horizon.

At ARRISE, we take pride in creating growth opportunities at all levels, constantly investing in our people while welcoming new colleagues and forging strategic partnerships that open new opportunities for success.

To achieve this, we bet on ourselves. We know that success is a collective effort, and our team is driven by ambition, collaboration, and a shared commitment to grow and succeed—while embracing every step of the journey.

Be part of the future of iGaming with 6,000 ARRISERS! See a job that excites you? Apply now, and our friendly recruitment team will connect with you soon. Your journey starts here!

About The Role:

DevOps Security Architect to join our dynamic team. The ideal candidate will be responsible for designing and implementing security strategies, policies, and solutions within our DevOps processes and environments. The individual will collaborate closely with development, operations, and security teams to ensure secure code deployment, continuous integration/continuous delivery (CI/CD) pipelines, infrastructure, and systems. You will play a critical role in ensuring that security is seamlessly integrated into our DevOps workflows.

Key Responsibilities:

• Security Strategy & Architecture: Design and implement security architecture to integrate into DevOps pipelines, ensuring secure software delivery from development to production.
• DevOps Integration: Collaborate with DevOps, security, and development teams to embed security measures across CI/CD pipelines, infrastructure as code (IaC), and automated workflows.
  
• Secure Infrastructure Management: Architect and maintain secure cloud-based environments, infrastructure automation, and deployment pipelines, while ensuring compliance with security policies and best practices.
  
• Threat Modelling & Risk Assessment: Identify and assess security risks in DevOps workflows, applications, and systems. Develop mitigation strategies to reduce potential vulnerabilities and exposures.
  
• Security Automation: Implement security tools and solutions for automated code scanning, vulnerability assessment, and remediation within the CI/CD pipeline.
  
• Incident Response & Monitoring: Define and manage security incident response procedures and monitoring tools to detect vulnerabilities and threats within the DevOps pipeline.
  
• Collaboration & Training: Work with development and operations teams to instill a security-first mindset, offering security training and guidance. Foster a culture of security and DevSecOps throughout the organization.
  
• Compliance & Governance: Ensure that DevOps practices adhere to industry security standards, regulations, and compliance frameworks (e.g., GDPR, HIPAA, SOC 2, etc.).
  
• Continuous Improvement: Stay up to date with the latest security trends, vulnerabilities, and industry best practices, and ensure that the DevOps environment is always evolving to mitigate new risks.

Experience:

• 10+ years of experience in DevOps, security, or related fields.
• Good experience in a security-focused role with hands-on experience in DevOps environments.
• Experience designing and implementing security architecture for cloud-native applications, infrastructure, and services (AWS, Azure, GCP).
  
• Strong experience with DevOps tools (Jenkins, GitLab, GitHub Actions, Ansible, Terraform, etc.).
  
• Experience with CI/CD pipelines, automated testing, and secure deployment practices.
  
• Knowledge of cloud security practices and tools.
  
• Experience with infrastructure as code (IaC) and automation tools (Terraform, CloudFormation, etc.).
  
• Familiarity with container security (Docker, Kubernetes, etc.) and orchestration platforms.

What We Offer:

• Driven by a persistence to craft immersive experiences and responsible thrills, our professional team consistently deliver best-in-class services with a dedication to create games that players love time and time again.
  
• Professional and personal development
• Opportunities to progress within a dynamic team.
• Private healthcare for employee only, but can extend to family for a small deduction from wages. Government healthcare also provided for everyone that pays social security contributions (mandatory for all employees). Private healthcare valid from first day.
• Private Health Insurance
• 25 days annual leave
• Visa application support (the company covers the cost)