Description

You will establish and operationalize a standardized DevSecOps framework across multi-cloud and on-prem environments, owning the end-to-end security integration within CI/CD pipelines.

This role is on-site.

Responsibilities

• Design and implement secure CI/CD pipelines using GitHub and GitLab, automating build, test, deploy, and security validation workflows.
• Implement Infrastructure as Code (IaC) with Terraform and configuration management with Ansible to ensure reproducible, secure deployments.
• Integrate security tooling for SAST, DAST, container image scanning, dependency scanning, and secrets management to automate vulnerability detection.
• Drive governance through policy-as-code, define DevSecOps KPIs/SLAs, and ensure compliance with ISO 27001 and internal audit requirements.
• Lead adoption and enablement across group companies through workshops, training, playbooks, and golden pipelines.

Required Skills

• 10+ years of experience in DevSecOps practices, integrating security within DevOps pipelines across cloud and on-prem environments.
• Hands-on expertise in CI/CD pipeline design and implementation using GitHub and GitLab.
• Solid knowledge of Infrastructure as Code using Terraform and configuration management using Ansible.
• Experience working with Kubernetes for container orchestration and secure deployments.
• Understanding of security concepts including SAST, DAST, vulnerability management, and secrets management.
• Knowledge of cloud platforms such as AWS, Azure, or GCP.
• Application of governance frameworks including policy-as-code and compliance standards like ISO 27001.
• Strong stakeholder management and communication skills for cross-functional collaboration.

Preferred Skills

• Experience optimizing DevSecOps toolchains and eliminating tool duplication through integration.
• Ability to evaluate emerging DevSecOps capabilities and run POCs/pilots to improve existing setups.

Key Skills

Education

Any Graduate