DevSecOps Engineer

Capgemini; Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Capgemini India is seeking a seasoned DevSecOps engineer to strengthen security across CI/CD pipelines, cloud environments, and applications. You will implement secure templates, automate security workflows, and enforce baseline controls while integrating IAM and security tools throughout the SDLC.

You should have deep hands-on experience with SAST/DAST/SCA, Docker and Kubernetes, IaC (Terraform/Ansible), and strong scripting skills in Python or Java. Excellence in problem-solving is essential.

Qualifications

• Bachelor's degree in Computer Science/IT/Cybersecurity or 10 years of hands-on experience.
• Strong knowledge of DevSecOps and Secure SDLC practices.
• Experience securing CI/CD pipelines and implementing security controls.
• Proficiency in Python, Java, or Shell scripting.
• Hands-on experience with SAST, DAST, SCA, and Secrets Scanning tools.
• Understanding of secure coding practices and application security.
• Experience with cloud platforms and cloud security controls (AWS/Azure/GCP).
• Knowledge of Infrastructure as Code (Terraform, Ansible).
• Strong understanding of IAM, authentication, authorization, and least-privilege principles.
• Experience with Docker and Kubernetes; networking fundamentals and secure architecture.

Responsibilities

• Implement, operate, and enforce security controls across CI/CD pipelines, cloud platforms, and application environments.
• Configure and maintain secure baseline templates, pipeline standards, and automation frameworks.
• Integrate and manage security tools within the SDLC. Manage Identity and Access Management (IAM) using Entra ID, RBAC, and platform security controls.
• Execute access provisioning, modification, and de-provisioning activities.
• Automate onboarding processes and security workflows, including ServiceNow integrations. Troubleshoot and resolve CI/CD, identity, and security tool-related issues.
• Monitor security control coverage, pipeline health, and vulnerability remediation metrics.
• Support audits, compliance assessments, attestations, and evidence collection activities. Investigate security incidents and assist with incident response activities.
• Create and maintain operational documentation, SOPs, and implementation guides.
• Drive continuous improvement in DevSecOps automation, tooling, and processes.

Skills

DevSecOps

Secure SDLC

CI/CD security

Python

Java

Shell scripting

Troubleshooting

Analytical skills

Education

Bachelor's degree or 10 years of hands-on experience

Tools

SAST

DAST

SCA

Secrets scanning

Docker

Kubernetes

Terraform

Ansible

Job description

Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way youd like, where youll be supported and inspired bya collaborative community of colleagues around the world, and where youll be able to reimagine whats possible. Join us and help the worlds leading organizations

Your Role

• Implement, operate, and enforce security controls across CI/CD pipelines, cloud platforms, and application environments.
• Configure and maintain secure baseline templates, pipeline standards, and automation frameworks.
• Integrate and manage security tools within the SDLC. Manage Identity and Access Management (IAM) using Entra ID, RBAC, and platform security controls.
• Execute access provisioning, modification, and de-provisioning activities.
• Automate onboarding processes and security workflows, including ServiceNow integrations. Troubleshoot and resolve CI/CD, identity, and security tool-related issues.
• Monitor security control coverage, pipeline health, and vulnerability remediation metrics.
• Support audits, compliance assessments, attestations, and evidence collection activities. Investigate security incidents and assist with incident response activities.
• Create and maintain operational documentation, SOPs, and implementation guides.
• Drive continuous improvement in DevSecOps automation, tooling, and processes.

Your Profile

• Bachelor''s degree in Computer Science, Information Technology, Cybersecurity, or a related field, or 10 years of equivalent hands-on professional experience.
• Strong knowledge of DevSecOps and Secure SDLC practices.
• Experience securing CI/CD pipelines and implementing security controls.
• Proficiency in Python, Java, Shell Scripting, or similar languages.
• Hands-on experience with SAST, DAST, SCA, and Secrets Scanning tools.
• Understanding of secure coding practices and application security.
• Experience with cloud platforms and cloud security controls (AWS/Azure/GCP).
• Knowledge of Infrastructure as Code (Terraform, Ansible).
• Strong understanding of IAM, authentication, authorization, and least-privilege principles.
• Experience with Docker and Kubernetes. Knowledge of networking fundamentals and secure architecture design.
• Experience in vulnerability management, remediation, and risk mitigation.
• Strong troubleshooting, analytical, and problem-solving skills.
• Experience with logging, monitoring, and security event analysis.