Devsecops Engineer

Key Responsibilities:

• Design, build, and maintain CI/CD pipelines using GitHub Actions.
• Implement and manage Infrastructure as Code (IaC) using Terraform for Microsoft Azure.
• Deploy and manage .NET-based applications as Docker containers on Azure App Services or AKS (Azure Kubernetes Services).
• Collaborate with developers to integrate DevSecOps practices into the software development process.
• Conduct regular security assessments, identify vulnerabilities, and implement controls to strengthen the delivery pipeline.
• Leverage Site Reliability Engineering (SRE) principles to design and build fault-tolerant, automated systems.
• Automate repetitive tasks to enhance efficiency and reduce human errors in deployment processes.
• Troubleshoot and resolve issues related to pipelines, infrastructure, and container environments.
• Monitor and optimize performance of deployment pipelines and infrastructure.
• Provide technical support and best-practice guidance to development teams on DevSecOps tooling and practices.
• Prepare and maintain technical documentation related to CI/CD, IaC, containerization, and DevSecOps strategy.

Required Qualifications:

• 10+ years of experience in DevSecOps, SRE, or related roles in modern engineering environments.
• Hands-on expertise in:
• CI/CD tools like GitHub Actions.
• Terraform for Azure cloud infrastructure.
• Containerization with Docker.
• .NET application deployment in a cloud-native environment.
• Solid understanding of DevSecOps principles, security integration in CI/CD, and automated vulnerability management.
• Familiarity with agile methodologies and working in scrum teams.
• Excellent analytical and troubleshooting skills, with attention to detail.
• Strong communication and team collaboration abilities.

Preferred Qualifications:

Certifications such as:

• Microsoft Certified: Azure Administrator Associate (AZ-104).
• Microsoft Certified: Azure DevOps Engineer Expert (AZ-400).

xperience with:

• Other CI/CD tools (Jenkins, GitLab CI, Azure DevOps).
• Kubernetes and orchestration platforms.
• Monitoring and observability tools (e.g., Prometheus, Grafana).
• Cloud and network security principles.
• Exposure to multi-cloud environments and enterprise-grade security architectures.