Senior DevSecOps Engineer

Experience : 5.00 + years

Salary : Confidential (based on experience)

Expected Notice Period : 15 Days

Shift : (GMT+05:30) Asia/Kolkata (IST)

Opportunity Type : Office ()

Placement Type : Full Time Permanent position(Payroll and Compliance to be managed by: Bluno)

**(*Note: This is a requirement for one of Uplers' client - Bluno)

**What do you need for this opportunity?

Must have skills required: CKS, OSCP, End-to-end deployment ownership, Infrastructure Automation, on-prem deployment, Security and compliance infrastructure in regulated (BFSI) environment

Bluno is Looking for:**** Role: Senior DevSecOps Engineer (On-Prem / BFSI)

Location : Bangalore , Onsite

About Bluno Bluno is an intelligent layer global trade runs on. A unified intelligent platform — the world’s first of its kind — Bluno embeds directly into exporter and importer workflows, eliminating the fragmented systems and document-heavy processes that have made trade

complex, slow, and expensive. Empowering businesses to focus entirely on growth, while Bluno handles the

rest.

Our mission: make global trade as seamless as doing business locally.

THE OPPORTUNITY Bluno is live across India’s key export hubs — and aggressively scaling into new markets. This role sits at the centre of that ambition. You will own the security posture of Bluno’s cloud and hybrid infrastructure end-to- end — building and enforcing the controls that keep sensitive trade and transaction data safe, and that meet the security expectations of the financial institutions Bluno integrates with.

What You’ll Do

• Design the architecture of Bluno’s cloud and hybrid infrastructure, and the security controls built into it.
• Own infrastructure-as-code, configuration management, and multi-account governance on AWS — Terraform, Ansible or Chef, least-privilege IAM, and cost and capacity discipline.
• Provision and operate on-premise and hybrid infrastructure where data residency requires workloads to remain in-country, including hybrid connectivity and network coordination.
• Design and maintain CI/CD pipelines with security embedded rather than appended — static, dynamic, dependency, container, and infrastructure scanning — tuned so gates block what matters without obstructing delivery.
• Own secrets and encryption key management across environments, and ensure credentials never reach source control.
• Own software supply chain security end-to-end — dependency and base-image hygiene, build integrity and provenance, software bill of materials and artifact signing, and a governed artifact registry.
• Implement and maintain day-to-day SOC 2 and ISO 27001 controls — access reviews, logging, evidence collection, and continuous control monitoring — and uphold data residency requirements.
• Own reliability alongside security: define and monitor SLOs, run observability, lead the on-call rotation, and drive incident response.

What We’re Looking For

• Bachelor’s degree in Computer Science, Engineering, or a related field.
• 5–7 years in DevOps, SRE, or infrastructure engineering, including 2–3 years of direct security engineering ownership.
• Deep, hands-on AWS experience — including EKS, Kubernetes, and Docker — with strong Terraform and CI/CD practice (GitHub Actions, Jenkins, or GitLab CI) Azure or GCP exposure is a plus.
• Proven ability to design infrastructure architecture for security, scale, and resilience.
• Production experience operating on-premise or hybrid infrastructure under data residency constraints.
• Experience securing platforms that handle sensitive financial or transactional data.
• Practical implementation of SOC 2 and/or ISO 27001 controls in a live production environment.
• Strong grounding in application and container security — SAST, DAST, dependency scanning,secrets management, Kubernetes security, and vulnerability remediation against severity-based SLAs.
• Sound judgement on security enforcement versus delivery velocity, and the ability to work autonomously in a fast-paced startup environment. Security certifications (AWS Security Specialty, CKS, OSCP, or CISSP) are a plus.

Skills Required AWS & EKS (Azure / GCP a plus)

• Kubernetes
• Docker
• Terraform
• Ansible / Chef
• CI/CD (GitHub

Actions / Jenkins / GitLab CI)

• SAST / DAST / SCA
• HashiCorp Vault / AWS KMS
• SBOM & Artifact Signing
• SOC 2 & ISO 27001
• On-Prem / Hybrid Infrastructure
• Observability (Prometheus / Grafana / Datadog)

How to apply for this opportunity?

• Step 1: Click On Apply! And Register or Login on our portal.
• Step 2: Complete the Screening Form & Upload updated Resume
• Step 3: Increase your chances to get shortlisted & meet the client for the Interview!

About Uplers: Our goal is to make hiring reliable, simple, and fast. Our role will be to help all our talents find and apply for relevant contractual onsite opportunities and progress in their career. We will support any grievances or challenges you may face during the engagement.

(Note: There are many more opportunities apart from this on the portal. Depending on the assessments you clear, you can apply for them as well).

So, if you are ready for a new challenge, a great work environment, and an opportunity to take your career to the next level, don't hesitate to apply today. We are waiting for you!