DevSecOps Engineer

McCormick & Company, Incorporated; Gurugram District; Hybrid; INR 4,000,000 - 7,000,000; Full time

Job summary

McCormick & Company, Incorporated is seeking an Engineer II, DevSecOps to design, build, and maintain secure CI/CD pipelines in Azure. You will own automation tooling, IaC modules, and deployment processes while integrating security controls across the software lifecycle.

The role requires collaboration with software, security, and cloud platform engineers to deliver resilient solutions and support governance, compliance, and incident response activities.

Qualifications

• Solid engineering knowledge in DevSecOps practices and CI/CD automation within Azure environments.
• Experience designing and maintaining CI/CD pipelines using Azure DevOps or GitHub Actions.
• Experience integrating security controls into automated pipelines (SAST, DAST, container scanning, secrets management).
• Proficiency with Infrastructure-as-Code tools and scripting languages.
• Strong understanding of source control management and Git-based workflows.
• Understanding of availability, performance, security, compliance, and supportability considerations.
• Ability to independently deliver moderate complexity technical work.
• Strong problem solving and root cause analysis skills.
• Ability to participate in technical reviews and recommend improvements.
• Effective collaboration across technical and business teams.

Responsibilities

• Design and implement DevSecOps solutions and secure CI/CD processes.
• Own day to day engineering activities for DevSecOps platforms, automation tooling, and delivery pipelines.
• Manage CI/CD platforms and code repositories, developing automated pipelines for application deployment and infrastructure provisioning.
• Troubleshoot and resolve moderately complex pipeline, automation, or integration issues.
• Automate testing, security scanning, and compliance validation within software delivery pipelines.
• Integrate security controls including static analysis, dependency scanning, container scanning, and policy validation into CI/CD workflows.
• Develop, maintain, and version reusable IaC modules and templates to enable secure, standardized Azure infrastructure provisioning.
• Implement GitOps and declarative infrastructure deployment models within Azure environments.
• Promote DevSecOps best practices and secure coding standards across engineering teams.
• Support architecture, capacity, performance, resiliency, and lifecycle planning of DevSecOps toolchains.
• Develop and maintain documentation, standards, and secure pipeline patterns.
• Implement monitoring, logging, and observability within CI/CD and deployment processes.
• Contribute to high-availability and disaster recovery strategies for CI/CD and automation platforms.
• Contribute to automation, monitoring, and service improvement efforts.
• Provide guidance to less experienced engineers as needed.
• Partner with stakeholders to support project and operational objectives.

Skills

DevSecOps

CI/CD automation

Azure DevOps

GitHub Actions

Security integration

SAST/DAST

Secrets management

Infrastructure as Code

Containerization

Git workflows

Education

Bachelor's degree in Computer Science or related field

Microsoft Certified: Azure DevOps Engineer Expert

Microsoft Certified: Azure Administrator Associate

Certified Kubernetes Administrator (CKA)

Tools

Terraform

Ansible

Azure Resource Manager (ARM)

AKS

Docker

Git

Job description

Select how often (in days) to receive an alert:

At McCormick, we bring our passion for flavor to work each day. We encourage growth, respect everyone's contributions and do what's right for our business, our people, our communities and our planet. Join us on our quest to make every meal and moment better.

Founded in Baltimore, MD in 1889 in a room and a cellar by 25-year-old Willoughby McCormick with three employees, McCormick is a global leader in flavour. With over 14,000 employees around the world and more than $6 Billion in annual sales, the Company manufactures, markets, and distributes spices, seasoning mixes, condiments and other flavourful products to the entire food industry, retail outlets, food manufactures, food service businesses and consumers.

While our global headquarters are in the Baltimore, Maryland, USA area, McCormick operates and serves customers from nearly 60 locations in 25 countries and 170 markets in Asia-Pacific, China, Europe, Middle East and Africa, and the Americas, including North, South and Central America

Position Overview

The Engineer II, DevSecOps is a fully competent engineering professional who independently designs, implements, supports, and improves secure platform and software delivery and automation solutions within Azure environments. This role is accountable for CI/CD platforms, automation frameworks, and security integration across the software development lifecycle.

The role partners closely with Software Engineers, Cloud Platform Engineers, Security Engineers, and Architects to enable secure, automated, and resilient solution delivery aligned with DevSecOps best practices.

Shift Timings: 01:00PM - 09:30PM IST

Key Responsibilities

• Design and implement DevSecOps solutions and secure CI/CD processes.
• Own day to day engineering activities for DevSecOps platforms, automation tooling, and delivery pipelines.
• Manage CI/CD platforms and code repositories, developing automated pipelines for application deployment and infrastructure provisioning.
• Troubleshoot and resolve moderately complex pipeline, automation, or integration issues.
• Automate testing, security scanning, and compliance validation within software delivery pipelines.
• Integrate security controls including static analysis, dependency scanning, container scanning, and policy validation into CI/CD workflows.
• Develop, maintain, and version reusable Infrastructure-as-Code (IaC) modules and templates (e.g., Terraform, Ansible, ARM) to enable secure, standardized, and scalable Azure infrastructure provisioning.
• Implement GitOps and declarative infrastructure deployment models within Azure environments.
• Promote DevSecOps best practices and secure coding standards across engineering teams.
• Support architecture, capacity, performance, resiliency, and lifecycle planning of DevSecOps toolchains.
• Develop and maintain documentation, standards, and secure pipeline patterns.
• Implement monitoring, logging, and observability within CI/CD and deployment processes.
• Contribute to high-availability and disaster recovery strategies for CI/CD and automation platforms.
• Contribute to automation, monitoring, and service improvement efforts.
• Provide guidance to less experienced engineers as needed.
• Partner with stakeholders to support project and operational objectives.

Required Qualifications

• Solid engineering knowledge in DevSecOps practices and CI/CD automation within Azure environments.
• Experience designing and maintaining CI/CD pipelines using Azure DevOps or GitHub Actions.
• Experience integrating security controls into automated pipelines (SAST, DAST, container scanning, secrets management).
• Proficiency with Infrastructure-as-Code tools and scripting languages.
• Strong understanding of source control management and Git-based workflows.
• Understanding of availability, performance, security, compliance, and supportability considerations.
• Ability to independently deliver moderate complexity technical work.
• Strong problem solving and root cause analysis skills.
• Ability to participate in technical reviews and recommend improvements.
• Effective collaboration across technical and business teams.

Preferred Qualifications

• Bachelor's degree in Computer Science, Engineering, or related field (or equivalent experience).
• Microsoft Certified: Azure DevOps Engineer Expert.
• Microsoft Certified: Azure Administrator Associate.
• Certified Kubernetes Administrator (CKA) or equivalent.
• 12+ years of experience in DevOps, DevSecOps, or Platform Engineering roles.
• Experience implementing enterprise DevSecOps governance and secure software delivery frameworks.
• Experience supporting containerized workloads and Azure Kubernetes Service (AKS).
• Strong communication, influence, and stakeholder alignment skills.

At McCormick, we have over a 100-year legacy based on our "Power of People" principle. This principle fosters an unusually dedicated workforce requiring a culture of respect, recognition, inclusion and collaboration based on the highest ethical value

WHY WORK AT MCCORMICK?

As a McCormick employee you'll be empowered to focus on more than your individual responsibilities. You'll have the opportunity to be part of something bigger than yourself—to have a say in where the company is going and how it’s growing.

Between our passion for flavor, our 130-year history of leadership and integrity, the competitive and comprehensive benefits we offer, and our culture, which is built on respect and opportunities for growth, there are many reasons to join us at McCormick.