Principal DevSecOps Engineer - AI

Who are we? At Finastra, we’re a global leader in financial services software, dedicated to expanding access to financial services and shaping what’s next for the industry. Our technology powers mission‑critical solutions across Lending, Payments and Universal Banking, supporting over 7,000 customers, including 80% of the world’s top 50 banks, in more than 110 countries. A senior technical SME responsible for enabling secure, automated delivery of machine learning and AI workloads. This role operates at the intersection of AI/ML engineering, product development, platform infrastructure, and cybersecurity—embedding security controls across the entire AI lifecycle, including CI/CD pipelines, model registries, vector databases, MCP services, and agent‑based AI orchestration. Key Responsibilities: Secure AI Platform Engineering Architect and implement secure, scalable, and resilient CI/CD pipeline’s purpose‑built for AI workloads, including LLM‑based and agentic AI systems. Automate secure build, deployment, and promotion workflows for AI workloads. ML/AI SecOps Integration Shift security left by embedding automated controls such as SAST, SCA, container/image scanning, and policy‑as‑code into pipelines. Implement AI‑specific security measures, including data‑poisoning safeguards, model integrity validation, and prompt‑injection mitigation. Infrastructure & Platform Securi [... source excerpt omitted ...] ails for responsible AI operations. Establish and maintain an AI Bill of Materials (AI‑BOM) to manage risk associated with third‑party models, components, and datasets. Required Qualifications: · 8–10 yrs DevSecOps experience, ML/AI SecOps, supply chain security. · Cloud Security expertise in securing Azure, AWS or GCP environment, particularly Kubernetes/Service Mesh, and their AI services · Mandatory Experience Python/Go, or similar programming language, along with advanced knowledge of IaC (Terraform) and GitOps patterns Preferred Skills: Experience with provenance/attestation frameworks (e.g., SLSA, Sigstore). Cloud security certifications (Azure, AWS, GCP). Hands‑on exper