Description

Key Skills: Governance, Terraform, Cloud (AWS / Azure / GCP), CICD, Kubernetes, Stakeholder Management, DevSecOps, Ansible, GitHub, Gitlab

Roles and Responsibilities:

• Establish and operationalize a standardized DevSecOps framework across multi-cloud and on-prem environments.
• Design and implement end-to-end CI/CD pipelines with integrated security controls and automate build, test, deploy, and security validation.
• Implement Infrastructure as Code (IaC) practices and container-based DevSecOps pipelines using Kubernetes.
• Integrate security tooling for SAST, DAST, container image scanning, dependency scanning, and secrets management; automate vulnerability detection and remediation workflows.
• Drive governance through policy-as-code and security-as-code, define DevSecOps KPIs/SLAs, and ensure compliance with ISO 27001 and internal security/audit requirements.
• Lead adoption and enablement across group companies through workshops, training, onboarding, playbooks, golden pipelines, and reference architectures.
• Provide 24x7 operational support for DevSecOps platforms and pipelines; continuously optimize pipeline performance and reliability.
• Manage and optimize the DevSecOps toolchain and eliminate tool duplication through integration and access control governance.
• Evaluate emerging DevSecOps capabilities and run POCs/pilots to innovate and improve the existing DevSecOps setup.
• Manage stakeholder and vendor alignment, handle escalations, and ensure timely resolution.

Skills Required:

• Demonstrates strong expertise in DevSecOps practices, integrating security within DevOps pipelines across cloud and on-prem environments.
• Shows hands-on experience in CI/CD pipeline design and implementation using tools like GitHub and GitLab.
• Possesses solid knowledge of Infrastructure as Code using Terraform and configuration management using Ansible.
• Has experience working with Kubernetes for container orchestration and secure deployments.
• Understands security concepts including SAST, DAST, vulnerability management, and secrets management.
• Exhibits knowledge of cloud platforms such as AWS, Azure, or GCP.
• Applies governance frameworks including policy-as-code and compliance standards like ISO 27001.
• Demonstrates strong stakeholder management and communication skills for cross-functional collaboration.
• Shows ability to optimize DevSecOps toolchains and drive automation initiatives.
• Displays problem-solving skills and the ability to manage incidents and escalations effectively.

Education: B.E/ B.Tech/ MCA

Key Skills

Education

Any Graduate