DevSecOps Engineer

Job Description – DevSecOps Engineer

Job Title

DevSecOps Engineer

Location

Pune, Work from Office

Position Summary

We are seeking a highly skilled DevSecOps Engineer to drive the integration of security, automation, and operational excellence across the software development lifecycle. The ideal candidate will be responsible for designing, implementing, and maintaining secure CI/CD pipelines, cloud infrastructure, monitoring solutions, and deployment frameworks while ensuring security and compliance are embedded into every stage of application delivery.

Key Responsibilities

DevOps & Automation

• Design, implement, and maintain CI/CD pipelines for automated build, test, security scanning, and deployment processes.
• Automate infrastructure provisioning and configuration management using Infrastructure as Code (IaC).
• Improve deployment reliability, scalability, and efficiency across environments.
• Manage release processes and act as a deployment gatekeeper to ensure production readiness.

Security Integration

• Embed security controls throughout the Software Development Lifecycle (SDLC).
• Implement and manage security scanning tools for code, containers, dependencies, and infrastructure.
• Perform vulnerability assessments and coordinate remediation activities.
• Ensure compliance with security policies, standards, and regulatory requirements.

Cloud & Infrastructure Management

• Manage and optimize cloud and on-premises infrastructure environments.
• Monitor system performance, availability, and capacity.
• Implement infrastructure hardening and security best practices.
• Support containerized workloads and orchestration platforms.

Monitoring & Incident Response

• Build and maintain observability solutions, including logging, monitoring, and alerting.
• Participate in incident management and root cause analysis activities.
• Drive continuous improvements to platform reliability and operational resilience.

Collaboration & Governance

• Partner closely with Development, QA, Application Support, Architecture, and Security teams.
• Provide guidance on DevSecOps best practices and secure development principles.
• Maintain technical documentation, operational runbooks, and deployment procedures.
• Support audit, compliance, and governance activities.

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, Engineering, or related field.
• 5+ years of experience in DevOps, Infrastructure Engineering, Cloud Operations, or DevSecOps roles.
• Strong experience with CI/CD tools such as GitLab CI, Azure DevOps, GitHub Actions, Jenkins, or similar.
• Experience with cloud platforms (Azure, AWS, or Google Cloud).
• Proficiency in scripting and automation using PowerShell, Python, Bash, or similar.
• Experience with Infrastructure as Code tools such as Terraform, Bicep, ARM, or CloudFormation.
• Knowledge of container technologies such as Docker and Kubernetes.
• Understanding of security frameworks, vulnerability management, and application security practices.
• Experience with monitoring and observability platforms such as Dynatrace, Azure Monitor, Splunk, Datadog, Clarity, Grafana, or Prometheus.

Preferred Qualifications

• Security certifications such as Security+, CISSP, CSSLP, or equivalent.
• Cloud certifications (Azure, AWS, GCP).
• Experience implementing Zero Trust and Secure Software Supply Chain practices.
• Experience with API security, WAF, IAM, and secrets management solutions.

Key Competencies

• Security-first mindset
• Strong problem-solving and analytical skills
• Automation and continuous improvement focus
• Collaboration and stakeholder management
• Excellent communication and documentation skills
• Ownership and accountability

Success Measures

• Increased deployment automation and reliability
• Reduced security vulnerabilities and remediation time
• Improved platform availability and operational performance
• Faster and more secure release cycles
• High compliance with security and governance standards