DevOps /DevSecOps Specialist

Goodfit; Dadri; Hybrid; INR 1,500,000 - 2,100,000; Full time

Job summary

Goodfit in Noida is seeking a DevOps / DevSecOps Specialist with 3–5 years of hands-on experience in automation, CI/CD, cloud infrastructure, containers, and security. The role focuses on integrating security throughout the SDLC and building secure, automated deployment environments.

You will collaborate with Development, QA, Infrastructure, and Security teams to design, implement, and operate scalable pipelines, enforce security gates, and manage cloud resources using Terraform, Docker,

Qualifications

• 3–5 years of hands-on experience in DevOps / DevSecOps.
• Strong understanding of DevOps and DevSecOps methodologies.
• Hands-on experience with CI/CD pipelines.
• Experience with Jenkins, GitLab, GitHub Actions, or Azure DevOps.
• Hands-on experience with Terraform / Infrastructure as Code.
• Good knowledge of Docker and Kubernetes.
• Experience with AWS, Azure, or GCP.
• Good understanding of Linux administration.
• Strong scripting skills (Python, Bash, PowerShell).
• Good understanding of Git and version control.
• Experience with security scanning and vulnerability-management tools.
• Knowledge of IAM, RBAC, secrets management, encryption, TLS/SSL, and cloud security.
• Experience with monitoring: Prometheus, Grafana, ELK/open search.

Responsibilities

• Design, implement, maintain, and optimise CI/CD pipelines.
• Automate application and infrastructure deployment processes.
• Work with Jenkins, GitLab CI/CD, GitHub Actions, or Azure DevOps.
• Implement automated build, release, deployment, and rollback processes.
• Troubleshoot pipeline failures and deployment issues across environments.
• Follow Git-based development and release-management practices.
• Integrate security into CI/CD pipelines and DevOps workflows.
• Implement Shift-Left Security across the SDLC.
• Integrate SAST, DAST, SCA, container security, secrets detection, and vulnerability scanning.
• Ensure secure configuration of cloud infrastructure and deployment environments.
• Develop and maintain IaC using Terraform; use Ansible for configuration management.
• Build and manage containerised apps with Docker and Kubernetes.
• Monitor and optimise infrastructure with Prometheus, Grafana, ELK/OpenSearch, CloudWatch.

Skills

DevOps / DevSecOps

CI/CD pipelines

Terraform / IaC

Docker & Kubernetes

Cloud platforms (AWS/Azure/GCP)

Linux administration

Scripting: Python/Bash/PowerShell

Git & version control

Security scanning tools

IAM & secrets management

Tools

Jenkins

GitLab CI/CD

GitHub Actions

Azure DevOps

Terraform

Ansible

Job description

Experience: 3–5 Years
Location: Noida
Work Mode: [Onsite / Hybrid]
Employment Type: Full-Time

Role Overview

We are looking for a skilled DevOps / DevSecOps Specialist with 3–5 years of hands-on experience in DevOps automation, CI/CD, cloud infrastructure, containerisation, and security.

The ideal candidate should have a strong understanding of DevSecOps practices and be capable of integrating security throughout the software development and deployment lifecycle. The candidate will work closely with Development, QA, Infrastructure, and Security teams to build secure, automated, scalable, and reliable deployment environments.

Key Responsibilities

DevOps & CI/CD

• Design, implement, maintain, and optimise CI/CD pipelines for application build, testing, security scanning, and deployment.
• Automate application and infrastructure deployment processes.
• Work with tools such as Jenkins, GitLab CI/CD, GitHub Actions, Azure DevOps, or similar.
• Implement automated build, release, deployment, and rollback processes.
• Troubleshoot pipeline failures and deployment issues across environments.
• Follow Git-based development and release-management practices.

DevSecOps & Security

• Integrate security practices into CI/CD pipelines and DevOps workflows.
• Implement Shift-Left Security practices across the software development lifecycle.
• Integrate tools for:
  • SAST
  • DAST
  • SCA / Dependency Scanning
  • Container Security
  • Secrets Detection
  • Vulnerability Scanning
• Identify, analyse, and remediate security vulnerabilities in applications, containers, and infrastructure.
• Implement security gates and quality checks within CI/CD pipelines.
• Work with development and security teams to address vulnerabilities and compliance requirements.
• Ensure secure configuration of cloud infrastructure and deployment environments.

Cloud & Infrastructure

• Hands-on experience with at least one major cloud platform such as AWS, Azure, or GCP.
• Deploy and manage cloud infrastructure using automation and Infrastructure as Code.
• Work with services related to compute, networking, storage, IAM, security, and monitoring.
• Support cloud infrastructure troubleshooting and optimisation.
• Understand cloud security principles including IAM, RBAC, network security, encryption, secrets management, and access control.

Infrastructure as Code & Automation

• Develop and maintain Infrastructure as Code using Terraform or similar tools.
• Automate infrastructure provisioning and configuration.
• Work with Ansible or other configuration-management tools.
• Develop scripts using Python, Bash, or PowerShell to automate repetitive operational tasks.
• Build reusable automation solutions following DevOps best practices.

Containers & Kubernetes

• Work with Docker and Kubernetes for containerisation and application deployment.
• Build, manage, and troubleshoot containerised applications.
• Work with Kubernetes deployments, services, ingress, ConfigMaps, Secrets, and namespaces.
• Implement security best practices for container images and Kubernetes environments.
• Exposure to AKS, EKS, or GKE will be an added advantage.

Monitoring & Observability

• Implement and maintain monitoring, logging, and alerting solutions.
• Work with tools such as:
  • Prometheus
  • Grafana
  • ELK / OpenSearch
  • CloudWatch
  • Azure Monitor
  • Application Insights
• Monitor infrastructure and application health and troubleshoot production issues.
• Participate in incident management and root-cause analysis.

Required Skills

• 3–5 years of hands-on experience in DevOps / DevSecOps.
• Strong understanding of DevOps and DevSecOps methodologies.
• Hands-on experience with CI/CD pipelines.
• Experience with one or more tools such as Jenkins, GitLab, GitHub Actions, or Azure DevOps.
• Hands-on experience with Terraform / Infrastructure as Code.
• Good knowledge of Docker and Kubernetes.
• Experience with AWS, Azure, or GCP.
• Good understanding of Linux administration.
• Strong scripting skills in Python, Bash, or PowerShell.
• Good understanding of Git and version control.
• Experience with security scanning and vulnerability-management tools.
• Good understanding of IAM, RBAC, secrets management, encryption, TLS/SSL, and cloud security.
• Experience with monitoring and logging tools such as Prometheus, Grafana, ELK, or cloud-native monitoring solutions.

Good to Have

• Experience with SonarQube, Trivy, Snyk, Checkmarx, Fortify, OWASP ZAP, or similar security tools.
• Experience with Helm and Kubernetes security.
• Knowledge of GitOps and tools such as Argo CD or Flux.
• Experience with DevSecOps platforms and security automation.
• Knowledge of container image security and Kubernetes security.
• Experience with cloud security services.
• Knowledge of compliance frameworks and security best practices.
• Relevant AWS / Azure / GCP / Kubernetes / DevSecOps certifications.

Key Competencies

• Strong troubleshooting and analytical skills.
• Security-first mindset.
• Strong understanding of automation and continuous improvement.
• Ability to identify and resolve infrastructure and security issues.
• Good communication and collaboration skills.
• Ability to work effectively with Development, QA, Security, and Infrastructure teams.
• Strong ownership of DevOps and security initiatives.

Ideal Candidate

The ideal candidate will be a hands-on DevOps / DevSecOps professional who understands both automation and security and can integrate security into the complete application delivery lifecycle.

The candidate should be comfortable working with CI/CD, Cloud, Terraform, Docker, Kubernetes, scripting, monitoring, and security scanning, with a strong focus on building secure, automated, reliable, and production-ready environments.

Location: Noida