Senior Specialist

We are recruiting to fill the position below:

Job Title: Senior Specialist - DevSecOps, Information Technology

Job Identification: 7547
Location: Ikoyi, Lagos
Job Category: MTN Level 3
Reports To: Senior Manager - Information Security
Division: Information Technology

Mission

• The Senior Specialist, DevSecOps is responsible for the delivery of the design, implementation, and continuous improvement of secure DevOps processes within MTN Nigeria by integrating security controls, automation, and monitoring into CI/CD pipelines, ensuring rapid delivery of high-quality and secure applications.
• They will drive a security-first engineering culture by proactively identifying risks, automating security controls, and enabling development teams to deliver scalable, compliant, and resilient systems at speed.

Description
The role operates within a highly complex internal technology and delivery ecosystem, requiring deep technical expertise and strong coordination across multiple domains:

• Cloud & Infrastructure Complexity:
  • Managing containerized environments (e.g., Kubernetes) with evolving security requirements
  • Implementing secure Infrastructure as Code (IaC) while maintaining scalability and consistency
  • Securing multi-cloud and hybrid environments with differing configurations and controls
• CI/CD & DevOps Integration:
  • Embedding security into end-to-end CI/CD pipelines without disrupting delivery timelines
  • Handling pipeline failures, false positives, and tuning tools for optimal performance
  • Managing integration of multiple security tools (SAST, DAST, SCA, secrets scanning) within automated workflows
• Application & Platform Complexity:
  • Ensuring consistent security standards across multiple development teams and product lines
  • Securing diverse enterprise applications and digital platforms, with varying architectures (monolithic, microservices, APIs)
  • Managing security across legacy systems and modern cloud-native applications
• Data Protection & Access Control:
  • Enforcing data security, encryption, and access governance across internal systems
  • Managing identity and access controls (IAM) for developers, systems, and applications
  • Ensuring proper handling of sensitive customer and business data across environments
• Compliance & Internal Governance
  • Aligning internal processes with security policies, standards, and audit requirements
  • Supporting internal audits, risk assessments, and control validations
  • Maintaining documentation and evidence for compliance without slowing delivery
• Tooling & Automation Challenges:
  • Selecting, integrating, and maintaining DevSecOps toolchains across the organization
  • Continuously optimizing automation to reduce manual intervention
  • Ensuring interoperability between tools (CI/CD, security scanners, ticketing systems, SIEM)

Requirements
Education:

• Certification: Security Certifications (Minimum of 1)
  • Microsoft Azure Security Engineer Associate
  • Certified Information Systems Security Professional (CISSP)
  • Cloud & DevSecOps-related professional Certifications
  • Google Professional Cloud Security Engineer
  • Certified Ethical Hacker (CEH)
  • Certified Kubernetes Security Specialist (CKS)
  • Certified Information Security Manager (CISM)
  • AWS Certified Security – Specialty
• Bachelor’s Degree
• Master’s in information science is preferred

Experience:
6–13 years of experience in IT, Cybersecurity, or DevOps roles

• Proficiency in:
  • Identity and Access Management (IAM)
  • Secure software development lifecycle
  • Vulnerability management and security testing tools (SAST, DAST, SCA)
  • Containerization and orchestration security (Docker, Kubernetes)
  • API security and microservices architecture
  • Cloud security architecture (AWS, Azure, GCP)
• Minimum of 5+ years specifically in DevSecOps
• Proven track record of implementing secure CI/CD pipelines and automation
• Experience in large-scale, high-availability environments (telecom, fintech, or enterprise IT)
• Experience working in a large organization.