Devsecops Engineer

Role & responsibilities

We are looking for an experienced Senior DevSecOps Engineer with 10+ years of experience in DevOps engineering, cloud infrastructure, CI/CD automation, and security integration. The candidate will be responsible for building and maintaining secure deployment pipelines, automating infrastructure provisioning, implementing security controls, and ensuring the reliability, scalability, and security of enterprise applications across cloud, hybrid, and on-premises environments.

Preferred candidate profile

• Design, develop, implement, and maintain secure CI/CD pipelines using Azure DevOps, GitHub Actions, GitLab CI/CD, Jenkins, or equivalent tools.
• Integrate security testing tools into CI/CD pipelines, including SAST, DAST, Software Composition Analysis (SCA), container scanning, and Infrastructure as Code (IaC) scanning.
• Develop and maintain Infrastructure as Code using Terraform, Bicep, ARM Templates, CloudFormation, or Pulumi.
• Automate application builds, deployments, environment provisioning, configuration management, and release processes.
• Implement deployment strategies such as blue-green, canary, rolling, and zero-downtime deployments.
• Build, deploy, and secure containerized applications using Docker, Kubernetes, OpenShift, AKS, EKS, or GKE.
• Implement security controls for cloud environments across Microsoft Azure, AWS, and Google Cloud.
• Configure and maintain artifact repositories, container registries, dependency management, and software supply chain security controls.
• Implement secrets management, certificate management, and secure credential handling using Azure Key Vault, HashiCorp Vault, CyberArk, or equivalent solutions.
• Configure identity and access management using Microsoft Entra ID, Okta, OAuth 2.0, OpenID Connect, SAML, RBAC, and privileged access controls.
• Implement policy-as-code and infrastructure governance using Azure Policy, Open Policy Agent (OPA), Gatekeeper, HashiCorp Sentinel, or similar tools.
• Monitor and remediate security vulnerabilities across applications, containers, cloud infrastructure, and deployment pipelines.
• Configure centralized logging, monitoring, alerting, and observability using Azure Monitor, Splunk, Datadog, Dynatrace, ELK Stack, Prometheus, and Grafana.
• Implement automated compliance checks and security baselines aligned with standards such as ISO 27001, SOC 2, PCI DSS, NIST, and CIS Benchmarks, as applicable.
• Perform security reviews, threat modelling, risk assessments, and root cause analysis for infrastructure and deployment-related issues.
• Troubleshoot complex CI/CD, cloud infrastructure, container, networking, and production deployment issues.
• Collaborate with development, security, QA, and platform engineering teams to improve deployment quality, automation, and developer experience.
• Implement operational best practices for system reliability, scalability, performance, cost optimization, and security.
• Document technical solutions, deployment procedures, security controls, and operational runbooks.
• Mentor engineers and contribute to continuous improvement of DevSecOps practices, tools, and engineering standards.