Senior Infrastructure Security & Compliance Engineer

About Company: They balance innovation with an open, friendly culture and the backing of a long-established parent company, known for its ethical reputation. We guide customers from what’s now to what’s next by unlocking the value of their data and applications to solve their digital challenges, achieving outcomes that benefit both business and society.

Job Title: Senior Infrastructure Security & Compliance Engineer

Location: PAN INDIA

Work Mode: Hybrid Mode

Experience: 7+years (6 years Relevant)

Job Type: Contract to hire (C2H)

Notice Period: - Immediate joiners.

Senior Infrastructure Security & Compliance Engineer (Zero-Touch GPU Cloud –

GitOps-Driven Compliance & Resilience)

We are seeking a Senior Infrastructure Security & Compliance Engineer with 10+ years

of experience in infrastructure and platform automation to drive the Zero-Touch Build,

Upgrade, and Certification pipeline for our on-prem GPU cloud environment. This role

is focused on integrating security scanning, policy enforcement, compliance

validation, and backup automation into a fully GitOps-managed GPU cloud stack,

spanning hardware → OS → Kubernetes → platform layers.

Key Responsibilities

• Design and implement GitOps-native workflows to automate security,

compliance, and backup validation as part of the GPU cloud lifecycle.

• Integrate Trivy into CI/CD pipelines for container and system image vulnerability

scanning.

• Automate kube-bench execution and remediation workflows to enforce

Kubernetes security benchmarks (CIS/STIG).

• Define and enforce policy-as-code using OPA/Gatekeeper to validate cluster

and workload configurations.

• Deploy and manage Velero to automate backup and disaster recovery operations

for Kubernetes workloads.

• Ensure that all compliance, scanning, and backup logic is declarative and

auditable through Git-backed repositories.

• Collaborate with infrastructure, platform, and security teams to define security

baselines, enforce drift detection, and integrate automated guardrails.

• Drive remediation automation and post-validation gates across build, upgrade,

and certification pipelines.

• Monitor evolving security threats and ensure tooling is regularly updated to detect

vulnerabilities, misconfigurations, and compliance drift.

Required Skills & Experience

• 10+ years of hands-on experience in infrastructure, platform automation, and

systems security.

• Primary key skills required are Python/Go/Bash scripting, OPA Rego policy

writing, CI integration for Trivy & kube-bench, GitOps

• Strong knowledge and practical experience with:

o Trivy for container, filesystem, and configuration scanning

o kube-bench for Kubernetes CIS benchmark compliance

o Velero for Kubernetes-native backup and disaster recovery

o OPA/Gatekeeper for policy-as-code and admission control

• Deep understanding of GitOps workflows (e.g., Argo CD, Flux) and how to integrate

security tools declaratively.

• Proven experience automating security, compliance, and backup validation in

CI/CD pipelines.

• Solid foundation in Kubernetes internals, RBAC, pod security, and multi-tenant

best practices.

• Familiarity with vulnerability management lifecycles and security risk remediation

strategies.

• Experience with Linux systems administration, OS hardening, and secure

bootstrapping.

• Proficiency in scripting languages such as Python, Go, or Bash for automation and

tooling integration.

• Bonus:

o Experience with SBOMs, image signing, or container supply chain security

o Exposure to regulated environments (e.g., PCI-DSS, HIPAA, FedRAMP)

o Contributions to open-source security/compliance projects