DevSecOps

Cloudxtreme; Pune District; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Cloudxtreme is seeking a skilled DevSecOps Engineer for our Pune, India team. You will drive DevSecOps adoption, design and implement CI/CD pipelines, and define robust logging and monitoring strategies to secure our applications and infrastructure.

You will work closely with engineers to enforce security requirements, automate vulnerability testing, and manage secure Azure cloud and container environments. Strong communication and problem-solving skills are essential in this role.

Qualifications

• Strong experience as a DevOps/DevSecOps engineer.
• Experience designing and implementing CI/CD pipelines.
• Experience with security testing and compliance checks.
• Experience with cloud security in Azure.
• Excellent communication and problem-solving skills.

Responsibilities

• Drive DevSecOps adoption and define best practices; guide engineers.
• Design and implement CI/CD pipelines.
• Define and implement logging and monitoring strategies.
• Hands-on with GitLab, Azure, Terraform, Docker/Kubernetes, and PowerShell/YAML.
• Automate security testing (SAST/DAST/SCA) in CI/CD pipelines.
• Conduct vulnerability assessments and coordinate remediation.
• Design and manage secure Azure cloud and container environments.
• Develop threat modeling and incident response activities.

Skills

DevOps engineering

DevSecOps adoption

CI/CD pipelines

Logging & monitoring

Security requirements

Agile & CD practices

Communication

Analytical thinking

Learning & innovation

Tools

GitLab

Azure

Terraform

Docker

Kubernetes

OpenShift

PowerShell

YAML

Job description

Role & responsibilities

1. •Strong experience as a DevOps engineer.
   • Experience in driving DevSecOps adoption and defining best practice, and guiding engineers to adhere to these.
   •Experience designing and implementing CI/CD pipelines.
   • Experience in defining and implementing logging and monitoring strategies.
   •Experience with GitLab, Azure, Azure Key Vault, Infrastructure as Code/Terraform, Docker/Kubernetes and PowerShell/YAML.
   •Experience defining and implementing security requirements.
   •Agile, Continuous Delivery and DevOps practices are part of your DNA.
   •Good communication skills both written and verbal.
   •Strong analytical and problem-solving skills, you like to figure out how things work.
   •Passion for learning and innovation.
   
   • Security Automation: Automate security testing (SAST, DAST, SCA) and compliance checks within the CI/CD pipelines (Jenkins, GitLab, Azure DevOps) to proactively identify and mitigate vulnerabilities early in the process.
   • Vulnerability Management: Conduct regular security assessments, vulnerability scanning, and penetration testing for web, mobile, and API applications, coordinating remediation efforts with development teams.
   • Cloud and Infrastructure Security: Design, implement, and manage secure cloud-based environments (Azure) and containerized platforms (Docker, Kubernetes, OpenShift), ensuring secure configurations and least privilege access controls.
   • Compliance and Governance: Establish and enforce security policies and procedures that comply with financial industry regulations (e.g., GDPR, FFIEC, MAS), generating detailed reports and metrics for leadership and auditors.
   • Threat Modeling and Incident Response: Perform threat analyses for applications and infrastructure, contributing to cross-functional incident response efforts and post-mortem analysis to prevent future occurrences.