Lead DevOps

About TresVista

TresVista enables Enterprise Intelligence Orchestration (EIO) by supporting the translation of insight into execution. We are a global enterprise that delivers advisory-led solutions with technology and managed services. TresVista works with clients to orchestrate their data and drive outcomes across investment, analytics, and operational workflows, bringing together deep domain expertise with AI enabled execution and a structured approach to decision-making.

Role Overview

This leadership role is responsible for defining and driving TresVista's enterprise-wide DevSecOps strategy. The position ensures secure, scalable, and automated delivery pipelines while embedding security into every stage of the software lifecycle. The role combines technical expertise, strategic vision, and team leadership to strengthen TresVista's security posture across cloud and CI/CD environments.

Key Roles Deliverables:

Implement and manage CI/CD pipelines with integrated security controls

Deploy and manage container security (Docker, Kubernetes security policies, admission controllers)

Work closely with development and operations teams to embed security early in the SDLC

Configure and maintain security tools such as SonarQube, Veracode, etc

Automate security checks using scripts (Python, Bash, PowerShell)

Manage secrets using Vault, AWS Secrets Manager, Azure Key Vault, etc

Implement cloud security best practices across AWS/Azure

Perform threat modelling, vulnerability management, remediation guidance

Monitor and respond to security incidents related to CI/CD or cloud workloads

Maintain compliance standards like ISO 27001, SOC2, GDPR, PCI-DSS

Prepare DevSecOps documentation and reports

Technical Skills Required:

Strong knowledge of DevOps fundamentals (CI/CD, GitOps, containers, orchestration)

Practical experience with cloud security tools and IaC security checks

Ability to automate with Python/PowerShell/Bash

Hands-on with Kubernetes security (RBAC, Network Policies, Pod Security Standards)

Experience with SIEM/SOAR tools is a plus (Sentinel, Splunk, QRadar)

Solid grasp of networking, firewalls, IAM, and encryption methods

Pre Requisites:

Deep expertise in cloud-native security and microservices security

Strong architectural understanding of CI/CD pipelines across multi-cloud environments

Ability to lead teams, run security programs, influence cross-functional stakeholders

Experience designing high-security, high-availability DevSecOps automation frameworks

Hands-on experience with security incident response processes and post-mortems

Ability to define roadmap, strategy, and budgets for security tooling

Experience

8-12+ years total IT experience

5+ years focused on DevSecOps, cloud security, and CI/CD automation

Education

Bachelor's or master's degree in computer science, Cybersecurity, Information Security, or related fields

High-value certifications preferred:

CISSP, CISM

AWS/Azure Cloud Security Specialty

CKS / CKA

GIAC Cloud or DevSecOps certifications

Terraform Associate + Security Engineering certifications

Compensation

The compensation structure will be as per industry standards

Required Skills

Strong knowledge of DevOps fundamentals (CI/CD, GitOps, containers, orchestration)

Practical experience with cloud security tools and IaC security checks

Ability to automate with Python/PowerShell/Bash

Hands-on with Kubernetes security (RBAC, Network Policies, Pod Security Standards)

Experience with SIEM/SOAR tools is a plus (Sentinel, Splunk, QRadar)

Solid grasp of networking, firewalls, IAM, and encryption methods