DevsecOps Engineer

Mindsprint; Bengaluru, Chennai District; On-site; INR 1,600,000 - 2,200,000; Full time

Job summary

Mindsprint in Bengaluru seeks a DevSecOps Engineer to build secure, automated delivery pipelines across AWS and Azure. You will own CI/CD, Kubernetes deployments and cloud infrastructure, embedding security into every stage of the delivery lifecycle.

Design and operate CI/CD pipelines in GitHub Actions, manage EKS/AKS with Helm, configure gateways, TLS and WAF, and implement SAST/DAST/SCA plus container image security. Strong scripting and Git workflows are essential.

Qualifications

• 4+ years in DevSecOps or cloud-native roles.
• Strong multi-cloud experience with AWS and Azure.
• Proven ability to build CI/CD pipelines with GitHub Actions.
• Hands-on Kubernetes deployment and operations in production.
• Embed security into SDLC with SAST/DAST/SCA and container security.
• Proficient scripting in Bash/PowerShell/Python and Git workflows.

Responsibilities

• Design, build and maintain CI/CD pipelines in GitHub Actions, with gates.
• Deploy and operate apps on Kubernetes (EKS/AKS) with Helm/manifests.
• Configure Application Gateway, TLS, WAF, and API gateway setups.
• Embed security into pipelines: SAST, SCA, DAST and container image security.
• Manage secrets using Key Vault or AWS Secrets Manager with least privilege.
• Collaborate with development teams to remediate vulnerabilities.
• Monitor release health with basic SLOs and support incident analysis.

Skills

AWS

Azure

CI/CD

Kubernetes

Security

Scripting

Git workflows

Tools

GitHub Actions

EKS

AKS

Helm

Terraform

Bicep

AWS Secrets Manager

Azure Key Vault

Job description

Overview

Role: DevSecOps Engineer

We are looking for a DevSecOps Engineer having 4+ years of experience to build and run secure, automated delivery pipelines across a multi-cloud environment. You will own CI/CD, Kubernetes deployments and cloud infrastructure across AWS and Azure, and embed security into every stage of the delivery process rather than treating it as a final check. This role suits someone who is equally comfortable writing pipelines, operating clusters, and improving application security posture.

Responsibilities

• Design, build and maintain CI/CD pipelines in GitHub Actions, including build, test, deployment and rollback stages with approval gates.
• Deploy and operate applications on Kubernetes (AWS EKS and Azure AKS), covering Helm charts, manifests, autoscaling, upgrades and cluster troubleshooting.
• Configure and manage Application Gateway and ingress/routing, including TLS, WAF and API gateway setups.
• Embed application security into the pipeline: SAST, SCA/dependency scanning, container image scanning, secret scanning and quality gates that block risky changes.
• Manage secrets and configuration across environments using tools such as Key Vault or AWS Secrets Manager, with rotation and least-privilege access.
• Work with development teams to remediate vulnerabilities, improve secure-coding practices and reduce the flow of security findings into production.
• Set up monitoring, alerting and basic SLOs so pipeline and release health is measurable, not guessed.
• Support incident response and root-cause analysis for pipeline and platform issues.

Required skills

• Solid hands-on experience with both AWS and Azure in a production setting.
• Strong experience building CI/CD pipelines in GitHub Actions (self-hosted runners a plus).
• Practical Kubernetes experience: deploying and operating workloads on EKS and/or AKS, with Helm and manifests.
• Experience configuring Application Gateway, load balancers, ingress and TLS/WAF.
• Hands-on experience integrating security into pipelines: SAST, SCA/dependency scanning, DAST and container image security.
• A good understanding of application security (AppSec): the OWASP Top 10 and secure SDLC.
• Scripting ability (Bash, PowerShell or Python) and comfort with Git-based workflows.

Good to have

• Infrastructure-as-Code experience (Terraform or Bicep).
• Relevant certifications (AWS/Azure architect or security, CKA/CKAD, or a recognised security certification).
• Experience with secrets management, policy-as-code and cloud security posture tools (Defender for Cloud, GuardDuty, Security Hub).
• Exposure to observability tooling (Grafana, Prometheus, Azure Monitor) and DORA metrics.