Devsecops Engineer

Role: DevSecOps Engineer

Location - Bangalore

Shift - Rotational

Work Mode - Hybrid

About the role: We are looking for a DevSecOps Engineer having 4+ years of exp to build and run secure, automated delivery pipelines across a multi-cloud environment. You will own CI/CD, Kubernetes deployments and cloud infrastructure across AWS and Azure, and embed security into every stage of the delivery process rather than treating it as a final check. This role suits someone who is equally comfortable writing pipelines, operating clusters, and improving application security posture.

What you will do:

• Design, build and maintain CI/CD pipelines in GitHub Actions, including build, test, deployment and rollback stages with approval gates.
• Deploy and operate applications on Kubernetes (AWS EKS and Azure AKS), covering Helm charts, manifests, autoscaling, upgrades and cluster troubleshooting.
• Configure and manage Application Gateway and ingress/routing, including TLS, WAF and API gateway setups.
• Embed application security into the pipeline: SAST, SCA/dependency scanning, container image scanning, secret scanning and quality gates that block risky changes.
• Manage secrets and configuration across environments using tools such as Key Vault or AWS Secrets Manager, with rotation and least-privilege access.
• Work with development teams to remediate vulnerabilities, improve secure-coding practices and reduce the flow of security findings into production.
• Set up monitoring, alerting and basic SLOs so pipeline and release health is measurable, not guessed.
• Support incident response and root-cause analysis for pipeline and platform issues.

Required skills:

• Solid hands-on experience with both AWS and Azure in a production setting.
• Strong experience building CI/CD pipelines in GitHub Actions (self-hosted runners a plus).
• Practical Kubernetes experience: deploying and operating workloads on EKS and/or AKS, with Helm and manifests.
• Experience configuring Application Gateway, load balancers, ingress and TLS/WAF.
• Hands-on experience integrating security into pipelines: SAST, SCA/dependency scanning, DAST and container image security.
• A good understanding of application security (AppSec): the OWASP Top 10 and secure SDLC.
• Scripting ability (Bash, PowerShell or Python) and comfort with Git-based workflows.

Good to have:

• Infrastructure-as-Code experience (Terraform or Bicep).
• Relevant certifications (AWS/Azure architect or security, CKA/CKAD, or a recognized security certification).
• Experience with secrets management, policy-as-code and cloud security posture tools (Defender for Cloud, GuardDuty, Security Hub).
• Exposure to observability tooling (Grafana, Prometheus, Azure Monitor) and DORA metrics.