DevSecOps Engineer

Requirements

DevSecOps Engineer

DevOps practices

Azure cloud infrastructure

infrastructure as code (IaC)

Bicep

security

SQL

Key Responsibilities

• DevSecOps Implementation: Integrate security principles and automation into all phases of DevOps processes — from design and development to deployment and monitoring. Implement shift-left security practices to detect vulnerabilities early in the pipeline.
• Cloud Infrastructure (Azure): Architect, deploy, and manage Azure resources using Azure DevOps, Bicep templates, and ARM templates. Ensure high availability, performance, and security of cloud workloads and services.
• Infrastructure as Code (IaC): Design and manage reproducible, version-controlled infrastructure using Bicep or Terraform. Maintain modular and reusable IaC templates for scalable deployments.
• CI/CD Automation: Build and optimize CI/CD pipelines for application and infrastructure deployments using Azure DevOps or GitHub Actions. Integrate automated testing, vulnerability scanning, and security checks in pipelines.
• Security Integration: Implement best practices for identity and access management (IAM), secrets management, encryption, and compliance monitoring. Conduct security reviews, implement policies, and remediate risks for cloud-native and hybrid environments.
• Database & Application Support: Support application teams in managing SQL databases, optimizing queries, and automating database deployment pipelines. Monitor performance and ensure data protection through backup and recovery strategies.
• Monitoring & Observability: Implement monitoring, logging, and alerting systems (e.g., Azure Monitor, Application Insights, Prometheus, Grafana) to ensure system reliability and security visibility.
• Collaboration & Mentorship: Work closely with software developers, architects, and security teams to align infrastructure and application goals. Mentor junior engineers in DevSecOps and cloud security best practices.
  

Qualifications & Skills

• Education: Bachelor's or Master's degree in Computer Science, Information Technology, or related field.
• Experience: Minimum 9 years in DevOps/Cloud Infrastructure roles, with at least 3 years in a DevSecOps capacity.
• Technical Skills:
• Strong hands-on experience with Microsoft Azure services (App Services, AKS, Functions, SQL Database, Storage, etc.).
• Proficiency in Bicep, ARM templates, and scripting languages such as PowerShell or Python.
• Solid understanding of CI/CD pipelines, Git, Azure DevOps, and containerization (Docker, Kubernetes).
• Advanced knowledge of SQL for database automation, performance tuning, and monitoring.
• Experience with security tools (e.g., SonarQube, Snyk, Prisma Cloud, Aqua Security).
• Soft Skills:
• Excellent problem-solving and analytical skills.
• Strong collaboration and communication abilities.
• Proven leadership and mentoring experience in cross-functional teams