DevSecOps Engineer

Artech L.L.C.; Hyderabad; On-site; INR 3,500,000 - 6,000,000; Full time

Job summary

Artech L.L.C. is seeking a DevSecOps Engineer with cloud and Kubernetes security expertise to safeguard AWS and GCP environments, implement CSPM, IAM least-privilege, and security governance, and integrate security into GitLab CI/CD pipelines.

The role demands hands-on experience with CSPM, Kubernetes security (GKE), runtime security (Falco), and IaC tooling (Terraform, Checkov). Strong network security, incident response, and compliance exposure are required for this Hyderabad-based position.

Qualifications

• 7+ years of experience in DevSecOps, Cloud Security, Platform Security, or Security Engineering.
• Hands-on experience securing AWS and Google Cloud Platform (GCP) environments.
• Strong expertise in Cloud Security Posture Management (CSPM), IAM, least-privilege access controls, and security governance.
• Extensive experience with Kubernetes Security, preferably GKE, including Pod Security Standards, RBAC, and Admission Controllers.
• Experience implementing and managing runtime security tools such as Falco.
• Strong knowledge of Istio Security including mTLS and authorization policies.
• Hands-on experience securing GitLab CI/CD pipelines.
• Experience integrating security controls such as SAST and DAST.
• Experience with Infrastructure as Code (Terraform) and security tools such as Checkov and tfsec.
• Knowledge of container security and software supply chain security.
• Experience with Secrets Management using AWS Secrets Manager and/or GCP Secret Manager.
• Understanding of network security concepts including WAF, TLS certificate management, DNS security, VPNs and private endpoints.
• Experience supporting compliance frameworks such as SOC 2, HIPAA, ISO 27001.
• Experience in cloud and Kubernetes security incident response and vulnerability management.
• Familiarity with security monitoring and observability tools such as Datadog.
• Excellent stakeholder management, threat modeling, and security review experience.

Skills

DevSecOps

Cloud security

Kubernetes security

GKE

RBAC

Pod Security Standards

Istio security

mTLS

Security governance

Threat modeling

Security review

Datadog

GitLab CI/CD

Terraform

Checkov

tfsec

Secrets management

Cloud platforms

Tools

Falco

Kubernetes runtime security

Terraform tooling

Checkov

tfsec

AWS Secrets Manager

GCP Secret Manager

WAF tooling

TLS certificate management tooling

Job description

Role: DevSecOps Engineer with Cloud Security Kubernetes Security Pipeline Security

Shift timings: 2pm to 11pm

Required Qualifications

• 7+ years of experience in DevSecOps, Cloud Security, Platform Security, or Security Engineering.
• Hands‑on experience securing AWS and Google Cloud Platform (GCP) environments.
• Strong expertise in Cloud Security Posture Management (CSPM), IAM, least‑privilege access controls, and security governance.
• Extensive experience with Kubernetes Security, preferably GKE, including:
• Pod Security Standards
• RBAC
• Admission Controllers
• Experience implementing and managing runtime security tools such as Falco.
• Strong knowledge of Istio Security including mTLS and authorization policies.
• Hands‑on experience securing GitLab CI/CD pipelines.
• Experience integrating security controls such as:
• SAST
• DAST
• Experience with Infrastructure as Code (Terraform) and security tools such as Checkov and tfsec.
• Knowledge of container security and software supply chain security.
• Experience with Secrets Management using AWS Secrets Manager and/or GCP Secret Manager.
• Understanding of network security concepts including:
• WAF
• TLS Certificate Management
• DNS Security
• VPNs and Private Endpoints
• Experience supporting compliance frameworks such as:
• SOC 2
• HIPAA
• ISO 27001
• Experience in cloud and Kubernetes security incident response and vulnerability management.
• Familiarity with security monitoring and observability tools such as Datadog.
• Excellent stakeholder management, threat modeling, and security review experience.

Nice‑to‑Have Qualifications

• Security certifications such as:
• CISSP
• CCSP
• AWS Security Specialty
• Google Professional Cloud Security Engineer
• CKA/CKS
• Experience building organization‑wide security policy‑as‑code frameworks.
• Experience in highly regulated environments (Healthcare, FinTech, SaaS).