DevSecOps Engineer

Role Overview We are seeking a highly skilled Senior DevSecOps Engineer with a strong background in DevOps/SRE/Platform Engineering. The ideal candidate will bring deep expertise in infrastructure automation, cloud platforms, security best practices, and containerized environments, while also ensuring that security is integrated seamlessly into every stage of the software development lifecycle. Key Responsibilities • Design and implement cloud-native, secure, and well-architected solutions that integrate with existing enterprise systems. • Build, deploy, and manage scalable cloud-based solution architectures with a focus on security, compliance, and resilience. • Automate infrastructure provisioning using Terraform, Pulumi (preferred), or similar IAC tools. • Define and implement security automation, including vulnerability scanning, compliance checks, and threat detection within CI/CD pipelines. • Apply shift-left security practices, integrating static/dynamic code analysis and container image scanning early in the development lifecycle. • Design, plan, and implement AWS (preferred) or other public cloud environments with strong security and monitoring standards. • Manage and optimize cloud networking for secure, reliable, and scalable connectivity. • Enable continuous monitoring using Grafana, Prometheus, and other observability tools. • Collaborate closely with DevOps, Security, and Development teams to enforce secure coding and deployment practices. • Engage with client SMEs, stakeholders, and cross-functional teams to gather requirements, troubleshoot, and deliver secure solutions. • Provide mentorship, team enablement, and knowledge sharing within internal and client teams. Must-Have Skills • 7+ years of experience as a DevOps/DevSecOps Engineer. • Strong expertise in public cloud platforms (AWS preferred, Azure/GCP considered). • Solid experience in Infrastructure as Code (IAC) with Terraform, Pulumi (highly preferred), or similar. • Proficiency in containerization (Docker, Podman) and orchestration (Kubernetes, ECS, EKS, AKS). • Hands-on experience in cloud security best practices (IAM, secrets management, encryption, compliance frameworks). • Good understanding of cloud networking concepts (VPCs, subnets, routing, security groups, firewalls, load balancers). • Expertise in DevOps practices including CI/CD pipelines, monitoring, and automation. • Familiarity with Grafana, Prometheus, and security monitoring tools.