AWS DevSecOps Engineer

Tata Consultancy Services; Hyderabad; On-site; INR 4,000,000 - 7,500,000; Full time

Job summary

Tata Consultancy Services is seeking an AWS DevSecOps Engineer with deep expertise in GitHub Actions, GHAS, AWS, Kubernetes (EKS), and Infrastructure as Code. You will design and manage secure CI/CD platforms, integrate security controls into development workflows, and enable scalable cloud-native deployments across multiple environments.

The role requires strong governance of GitHub Enterprise, implementation of security best practices, and collaboration with Security and Engineering teams to

Qualifications

• 10+ years in DevOps/DevSecOps or platform engineering.
• Proficient with GitHub Actions and GitHub Enterprise.
• Experience with GHAS and cloud security in CI/CD.
• Strong IaC experience with Terraform, CloudFormation, AWS CDK.

Responsibilities

• Design, implement, and maintain GitHub Actions workflows across development, staging, and production environments.
• Build and optimize ARC runners on Kubernetes (EKS) with auto-scaling and security.
• Enforce GitHub governance, branch protection, and deployment gates.
• Migrate legacy CI/CD pipelines to GitHub Actions.
• Collaborate on SAST/DAST/SCA and secrets management throughout SDLC.

Skills

GitHub Actions

GHAS

AWS

Kubernetes / EKS

Terraform

CI/CD Automation

Security in DevOps

SAST/DAST/SCA

Secrets Management

Bash / Python

Education

Bachelor's degree in CS/IT/Engineering

Tools

ARC (Actions Runner Controller)

Job description

Job Title:

AWS DevSecOps Engineer | GitHub Actions | GHAS | EKS | Terraform

Location:

Pan India

Experience:

10+ Years

Job Summary:

We are seeking a highly skilled AWS DevSecOps Engineer with strong expertise in GitHub Actions, GitHub Advanced Security (GHAS), AWS, Kubernetes (EKS), and Infrastructure as Code. The ideal candidate will be responsible for designing and managing secure CI/CD platforms, implementing GitHub Enterprise governance, integrating security controls into development workflows, and enabling scalable cloud-native deployments across multiple environments.

Key Responsibilities:

• Design, implement, and maintain GitHub Actions workflows across development, staging, and production environments.


• Build, manage, and optimize self-hosted Actions Runner Controller (ARC) runners on Kubernetes (EKS).


• Implement runner auto-scaling, pod identity, workload isolation, and network security policies.


• Integrate GitHub Advanced Security (GHAS) capabilities, including:


• Push Protection


• CodeQL Scanning


• Migrate legacy CI/CD pipelines from Jenkins, TeamCity, AWS CodePipeline, and CodeBuild to GitHub Actions.


• Enforce GitHub governance controls, including branch protection rules, required status checks, deployment approvals, and environment gates.


• Develop reusable GitHub Actions, composite actions, and reusable workflow templates for enterprise-wide adoption.


• Collaborate with Security and Engineering teams to implement SAST, DAST, SCA, and secrets management practices throughout the software delivery lifecycle.


• Manage GitHub Enterprise Cloud (GHEC) or Enterprise Managed Users (EMU) environments.


• Configure user provisioning, access control, SCIM integrations, and Okta-based identity management.


• Monitor CI/CD platforms using Splunk, CloudWatch, Datadog, and logging solutions.


• Support Infrastructure-as-Code deployments using Terraform, CloudFormation, and AWS CDK.


• Drive DevSecOps best practices, automation, compliance, and platform reliability.

Required Skills & Qualifications:

Technical Skills:

• 10+ years of experience in DevOps, DevSecOps, or Platform Engineering.


• Strong hands‑on experience with GitHub Actions and GitHub Enterprise.


• Experience implementing GitHub Advanced Security (GHAS).


• Hands‑on experience with Kubernetes and Amazon EKS.


• Experience managing self-hosted runners and ARC (Actions Runner Controller).


• Expertise in CI/CD pipeline design and automation.


• Strong understanding of application security concepts including:


• SAST


• DAST


• SCA


• Secrets Management


• Experience with Infrastructure as Code:


• Terraform


• CloudFormation


• AWS CDK


• Experience with monitoring and observability tools such as Splunk, Datadog, and CloudWatch.


• Strong scripting skills using Bash, Python, or PowerShell.


• Experience with GitOps and modern deployment practices.

Preferred Skills:

• Experience migrating enterprise CI/CD platforms to GitHub Actions.


• Knowledge of Zero Trust and DevSecOps frameworks.


• Exposure to container security platforms and cloud security tools.


• Experience in regulated or compliance‑driven environments.

Education:

• Bachelor's Degree in Computer Science, Information Technology, Engineering, or a related field.

Certifications (Preferred):

• AWS Certified Solutions Architect