Job Description
Lead DevSecOps Engineer
United States – Boston, New York, Toronto, Hybrid Possible
About Us
Oliver Wyman Digital is a ground‑breaking division within Oliver Wyman, delivering world‑class solutions that give our clients a competitive edge. We work across the full technology stack, from databases and analytics to APIs and web and mobile applications. With over 700 consultants, specialists, and support professionals in 16 major cities worldwide, we are committed to growth that retains our start‑up agility while expanding our opportunities for world‑class work.
Oliver Wyman is a global leader in management consulting, with a staff of over 4,000 across 30 countries.
The Role and Responsibilities
The Lead DevSecOps Engineer is not a Sys Admin or Site Reliability Engineer, though many of those skills will be useful. You will join project teams and constantly invent new solutions rather than maintain an existing platform. This role “plays well with cloud” but is more like a software engineer with a DevSecOps specialization. Conceiving, designing and delivering the project infrastructure is paramount, including working directly with client IT teams to understand and advise on their own infrastructure. Familiarity with major application frameworks (Node, Java, Python) is beneficial; coding experience is helpful but not essential.
We expect the person in this role to:
Craft technical solutions to challenging problems
Partner with OWG practice groups (e.g., Retail, Health & Life Sciences) and client teams to understand business and infrastructure needs
Advise on and support secure infrastructure solutions for teams, whether building on our internal hosting solution or with our clients’ in‑house transformations
Drive the DevSecOps role on technical projects (as a leader or contributor), seeking opportunities for good solution design and promoting clarity, robustness, security, performance and scalability
Define engineering goals for clients from non‑technical briefings, acting as the go‑to for infrastructure solutions on a project and technically lead that workstream
Communicate technical ideas clearly to any audience and write documentation for an entire solution or program of work
Objectively assess and influence technology decisions based on the project’s objectives and goals
Contribute significantly to a discovery phase, run estimation sessions with teams and provide estimates on complex solutions
Recognize, execute or direct refactoring opportunities across complex or interdependent systems
Build trust and credibility with both technical and non‑technical stakeholders within OW
Your Experience
Building things using different tools and technologies
Adapting to evolving technical trends
Working across varying facets of the technology stack
Public cloud environments (e.g., AWS, Azure, GCP)
Deploying, scaling, and monitoring generative AI applications (e.g., Azure AI Foundry, AWS Bedrock) and related services (Azure AI Search, OpenSearch, etc.)
Ability to secure, monitor, and optimize APIs for AI‑driven applications
Versatility around technology and an ability to apply the appropriate technology to problem‑solving
Handling multiple workstreams and prioritizing accordingly
Enterprise‑scale delivery of full‑stack systems with security, extensibility, and robustness at the forefront
Being fungible and flexible to work on a variety of technologies, including those that are new or unfamiliar to you
Client relationship building and ongoing client relationship management
We’re also hoping you’ll be able to show us experience with some of the following. You don't need deep experience with everything here to apply; still, some depth in one or more of these will go a long way:
DevSecOps tools: Docker, Rancher, Kubernetes, Jenkins, Terraform
Cloud Platforms: AWS, Azure
Infrastructure‑as‑Code/Platform‑as‑Code cloud‑native tooling: Serverless, EKS, AKS
Operating Systems: Windows Server, Linux (Ubuntu)
Scripting: Python, Bash, PowerShell, AWS CLI, Azure RM
Web application capabilities: Node.js, Express, REST APIs
AI Risk management: Understanding and mitigation of risks unique to generative AI (prompt injection, model abuse, adversarial attacks, data privacy)
Cloud‑native tooling on Amazon (RDS, Aurora) and Azure (Azure Managed Instances, Azure SQL Database)
Databricks
Progression and implementation against the OWASP DevSecOps Maturity Model
Monitoring and logging: Prometheus, CheckMK, Nagios, Grafana, Fluentd, Splunk
Hands‑on experience with infrastructure supporting GPU/TPU workloads and high‑throughput model inference
Python
Your Attributes
A genuine passion for technology and solving problems
A pragmatic approach to solutioning and delivery
Excellent communication skills, both verbal and written
A clear commitment to creating impactful solutions that solve our clients’ problems
The willingness to work fluidly and respectfully with our incredibly talented team
Our Values & Culture
Rewarding work – High‑quality projects with major brands and the reputation of Oliver Wyman as a “Best Company to Work For”, providing recognition and challenge.
Progressive employment – Flat organizational structures, I&D values, merit‑based rewards, healthcare options, 401(k) matching, and continuous improvement.
Enjoyable days – Opportunities for mentorship, development, sponsoring, and social impact.
Balanced lives & Remote Work – Flexible hours and ability to work from home to support work‑life balance.
How to Apply
If you like what you’ve read, submit your CV and a short note introducing yourself at https://careers.marshmclennan.com/global/en/oliver-wyman-search. The process includes technical testing and team fit interviews.
Oliver Wyman is an equal opportunity employer. Our commitment to diversity is genuine, deep, and growing. We are working hard to make our teams balanced, representative, and diverse.
Marsh McLennan and its affiliates are EOE Minority/Female/Disability/Vet/Sexual Orientation/Gender Identity employers.
Job code: R_330441
#J-18808-Ljbffr