Description

Establish and operationalize a standardized DevSecOps framework across multi-cloud and on-prem environments. This role is on-site.

Responsibilities

• Design and implement end-to-end CI/CD pipelines with integrated security controls, automating build, test, deploy, and security validation.
• Implement Infrastructure as Code using Terraform and container-based pipelines using Kubernetes.
• Integrate security tooling for SAST, DAST, container image scanning, and secrets management to automate vulnerability detection.
• Drive governance through policy-as-code, define KPIs/SLAs, and ensure compliance with ISO 27001 and internal audit requirements.
• Lead adoption across group companies via workshops, training, and golden pipelines while providing 24x7 operational support.

Required Skills

• 10+ years of experience in DevSecOps practices, integrating security within DevOps pipelines.
• Hands-on experience with CI/CD pipeline design using GitHub and GitLab.
• Strong knowledge of Infrastructure as Code using Terraform and configuration management with Ansible.
• Experience with Kubernetes for container orchestration and secure deployments.
• Proficiency in cloud platforms: AWS, Azure, or GCP.
• Understanding of security concepts including SAST, DAST, vulnerability management, and secrets management.
• Application of governance frameworks, policy-as-code, and compliance standards like ISO 27001.

Preferred Skills

• Experience managing stakeholder alignment, vendor relationships, and technical escalations.
• Ability to evaluate emerging DevSecOps capabilities and run POCs/pilots.

Key Skills

Education

Any Graduate