Senior DevSecOps Engineer (AWS)

Senior DevSecOps Engineer AWS

Location: Chennai
Work Mode: Work from Office
Experience: 58 Years
Department: Engineering / DevOps & Cloud Security

Job Description

We are looking for a skilled Senior DevSecOps Engineer with strong hands-on experience in AWS cloud infrastructure, DevOps automation, and cloud security. The candidate will be responsible for building and maintaining secure cloud infrastructure, automating deployments, implementing security controls, and ensuring the availability, scalability, and compliance of our cloud environment.

Key Responsibilities

DevOps & AWS Infrastructure

• Design, deploy, and maintain scalable AWS cloud infrastructure.
• Build and manage CI/CD pipelines for automated application deployment and releases.
• Automate infrastructure provisioning and management using Terraform.
• Manage cloud infrastructure monitoring, performance, availability, and reliability.
• Troubleshoot deployment issues and production incidents.
• Work with Docker and Kubernetes for containerization and orchestration.

AWS Cloud Security

• Implement and manage AWS security services, including GuardDuty, Security Hub, AWS Config, CloudTrail, and Inspector.
• Use Amazon Macie to identify sensitive data in S3 and implement remediation measures.
• Design least-privilege IAM policies, permission boundaries, cross-account access, and federation.
• Implement AWS IAM Identity Center and short-lived credentials to reduce long-lived access keys.
• Configure Service Control Policies (SCPs) and organization-wide security guardrails.
• Manage encryption and key lifecycle controls using AWS KMS.
• Secure sensitive business data and identity documents.
• Identify vulnerabilities, investigate security alerts, and remediate cloud security risks.

DevSecOps & Incident Response

• Integrate automated security checks into CI/CD pipelines.
• Implement security-as-code and automated policy enforcement.
• Lead security incident detection, investigation, containment, and post-incident reviews.
• Identify and resolve infrastructure misconfigurations and security gaps.
• Collaborate with development teams to improve application and infrastructure security.

Compliance & Governance

• Support ISO 27001, SOC 2, or PCI-DSS compliance requirements.
• Maintain security policies, audit trails, and compliance evidence.
• Conduct periodic access reviews and cloud security assessments.

Required Skills

• 5+ years of hands-on experience in DevOps, AWS infrastructure, and cloud security.
• Strong knowledge of AWS architecture, networking, and security best practices.
• Expertise in AWS IAM, KMS, GuardDuty, Security Hub, CloudTrail, Config, Inspector, and Macie.
• Strong hands-on experience with Terraform and Infrastructure as Code.
• Experience with CI/CD tools such as Jenkins, GitHub Actions, or GitLab CI/CD.
• Working knowledge of Docker and Kubernetes.
• Scripting skills in Python or Bash.
• Practical experience in security incident response and vulnerability remediation.
• Experience with ISO 27001, SOC 2, or PCI-DSS compliance.

Preferred Qualifications

• AWS Certified Security Specialty.
• AWS Certified DevOps Engineer – Professional.
• Experience securing production SaaS applications.
• Knowledge of policy-as-code and cloud security automation.