Devsecops Engineer

Job Summary

We are looking for a DevSecOps Engineer with strong expertise in Azure Cloud, CI/CD automation, and security best practices. The ideal candidate will drive secure development pipelines, implement cloud security controls, and collaborate with development, security, and operations teams to ensure scalable and compliant solutions.

Key Responsibilities

DevOps & Automation

• Design, implement, and manage CI/CD pipelines using Azure DevOps / GitHub Actions.
  
• Automate infrastructure provisioning using IaC tools such as Terraform, ARM templates or Bicep.
  
• Manage containerization and orchestration using Docker and Kubernetes (AKS).
  
• Monitor infrastructure, application performance, and logs using Azure Monitor, Log Analytics, and Application Insights.
  

Security (DevSecOps)

• Integrate security tools (SAST, DAST, SCA) into CI/CD pipelines.
  
• Implement Azure security best practices including Azure Security Center, Defender for Cloud, Key Vault, RBAC, Policies.
  
• Conduct vulnerability assessments and ensure timely remediation.
  
• Automate security compliance checks and ensure adherence to standards (ISO, SOC, CIS Benchmarks).
  
• Manage secrets, certificates, and access via Azure Key Vault.
  

Cloud & Infrastructure

• Manage and optimize Azure resources such as VMs, Storage, VNETs, NSGs, Load Balancers.
  
• Implement zero-downtime deployment strategies (blue-green, canary, rolling).
  
• Ensure scalability, reliability, and high availability of cloud systems.
  
• Troubleshoot cloud, security, and pipeline-related issues.
  

Collaboration

• Work closely with developers, architects, security teams, and product teams.
  
• Provide guidance on secure coding practices and cloud security architecture.
  
• Support release management and improve DevSecOps processes continuously.
  

Required Skills

• Strong hands-on experience with Azure cloud services.
  
• Experience with Azure DevOps / GitHub Actions CI/CD.
  
• Good understanding of Cloud Security, IAM, RBAC, Key Vault.
  
• Experience with containerization (Docker) and AKS.
  
• Knowledge of SAST/DAST tools (SonarQube, Checkmarx, GitHub Advanced Security, Veracode etc.)
  
• Good scripting skills (PowerShell, Bash, Python).
  
• Experience with Terraform / Bicep / ARM for IaC.
  
• Experience with monitoring tools (Azure Monitor, Grafana, Prometheus).
  
• Understanding of networking concepts: VNET, VPN, DNS, Load Balancers, Firewalls.
  

Preferred Skills

• Certifications like AZ-900, AZ-104, AZ-305, AZ-400, or SC-200.
  
• Experience with Zero Trust, security automation, and compliance frameworks.
  
• Knowledge of microservices and distributed systems.
  

Education

• Bachelors degree in Computer Science, Engineering, or related field.