DevSecOps Engineer SR - India

Why you'll LOVE Sagent:

You could work anywhere. We know you are talented and looking for something inspiring and impactful. A place where you will make a difference and have a great time doing it!

By choosing Sagent, you can be part of our mission to make loans and homeownership simpler and safer for all US consumers.

Sagent powers servicers and consumers. You power Sagent!

About the Opportunity:

Sagent is seeking a DevSecOps Engineer to join a growing information security team responsible for securing next-generation, cloud-native financial technology systems, used by some of the largest mortgage lenders and loan servicers in the United States. The DevSecOps Engineer will be a hands-on, tactical role that will secure cloud-native applications through Infrastructure as Code, build automation for cloud-based security controls, and execute the secure by design vision across the GCP and Azure environments. This role will have abundant opportunities to challenge the status-quo and work with cutting-edge security technologies, tools, and platforms.

We'd love to hear from you if you have:

• Extensive experience (~4+ years) building, deploying, and securing GCP & Azure cloud infrastructure with Terraform.

• Experience expressing secure by design” and “shift left” principles through Infrastructure as Code (Terraform)

• Prior system administrator (Linux/Windows) experience is a big plus!

• Enthusiasm for automation and creative technical ability to identify time-saving or novel automation workflows. Proven ability to enhance security through automation, continuous integration/deployment pipelines, and challenge existing processes/norms.

• Strong knowledge of software security risks and threats (OWASP top 10). Experience with application security tools such as Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA).

• Experience building & maintaining container-based/Kubernetes-based workloads; understanding of container security threats and best practices.

• Experience building & maintaining cloud networking & cloud-based security controls, such as SSL certificate management, API gateway, Web Application Firewall (WAF), Intrusion Prevention System (IPS) and associated security best practices.

• Experience working with YAML pipelines/Azure Pipelines/Azure DevOps (or equivalent technologies).

• Experience configuring secure IAM, such as least privilege, zero trust, privileged identity management.

• The habit of staying current on cloud security policies, standards, regulations, and best practices, as well as strong understanding of cloud-focused security risks and threats.

• Ability to work independently with minimal guidance and mentor other team members as necessary.

• Support the Information Security & core DevOps teams with other cloud-based security tasks as needed, and willingness to work outside of standard business hours during critical incidents.

Important Considerations:

• The nature of this role may require the individual to participate in regular on-call rotations on weekends and holidays. However, we deeply recognize the importance of maintaining a healthy work-life balance. Our organization is committed to providing resources and strategies to mitigate the impact of extended hours, including opportunities for flexible scheduling, and ensuring adequate time off to recharge and maintain overall well-being.

Job Post Link

Perks!