Senior DevOps & DevSecOps Engineer

Experience:

6–10+ Years

We are looking for a Senior Dev Ops & Dev Sec Ops  Specialist who will architect, implement, and continuously improve scalable, secure, and automated cloud-native infrastructure across enterprise-grade projects in BFSI, Government, Healthcare, and Retail domains.

This is not a maintenance role.

This is a platform ownership and security-first engineering role.

You will drive CI/CD maturity, cloud optimization, infrastructure as code, container security, vulnerability management, Dev Sec Ops  guardrails, and AI-enabled operational automation.

Key Responsibilities
1. Dev Ops Architecture & Platform Engineering

- Design and implement CI/CD pipelines using Git Lab CI/CD
- Architect containerized environments using Docker & Kubernetes
- Implement scalable deployments on AWS / Azure
- Design HA architectures
- Build internal developer platforms

2. Dev Sec Ops  Implementation

- Integrate security scanning tools into CI/CD:
- Grype, Syft
- Gitleaks, Truffle Hog
- Checkov
- Sonar Qube
- Implement SAST, DAST, dependency scanning
- Enforce Infrastructure-as-Code security standards
- Automate compliance checks (ISO 27001, SOC2 alignment preferred)
- Build Zero-Trust & Least Privilege frameworks

3. Infrastructure as Code & Automation

- Terraform (must)
- Helm (must)
- Ansible (must)
- Cloud resource optimization and cost governance
- Secrets management & key rotation strategy

4. Monitoring & Observability

- Implement observability stack using:
- Prometheus
- Grafana
- Cloud Watch
- New Relic / Datadog
- Log management and incident response automation
- AI-powered anomaly detection (good to have)

5. Cloud & Security Governance

- VPC design and network segmentation
- IAM strategy
- WAF, API Gateway hardening
- Secure container registries
- Disaster Recovery and BCP planning
- Backup strategy implementation

Must-Have Technical Skills

- Git Lab CI/CD (Advanced)
- Cloud

AWS (primary), Azure (good to have)
- Containers Docker
- Kubernetes IaC Terraform
- HelmSecurity

SAST/DAST tools
- Sonar Qube Secrets Vault
- Prometheus, Grafana

OSLinux (RHEL/Ubuntu)

Good-to-Have

- Experience in BFSI or Gov Tech secure environments

- Experience with PCI-DSS / SOC2 / ISO 27001

- Experience with RPA infrastructure deployments
- AI/ML workload deployment experience
- Experience implementing Dev Sec Ops  from scratch

What We Expect

- Ownership mindset — not ticket executor
- Security-first thinking
- Cost-conscious cloud architect
- Process-driven and documentation-friendly
- Can lead Dev Ops maturity roadmap
- Can mentor junior engineers