Devsecops Engineer

VDart Software Services; Hyderabad, Pune District, Bengaluru; Hybrid; INR 4,000,000 - 7,000,000; Full time

Job summary

VDart Software Services seeks a Senior DevSecOps Engineer with 10+ years of experience in DevOps, cloud infrastructure, CI/CD automation, and security integration. The role focuses on building secure pipelines, automating provisioning, and enforcing security across hybrid and on-prem environments.

The ideal candidate will design and maintain secure CI/CD pipelines using Azure DevOps, GitHub Actions, or Jenkins, integrate SAST/DAST/SCA, and manage IaC with Terraform, ARM/CloudFormation, or

Qualifications

• Design, develop, implement, and maintain secure CI/CD pipelines using Azure DevOps, GitHub Actions, GitLab CI/CD, Jenkins, or equivalent tools.
• Integrate security testing tools into CI/CD pipelines, including SAST, DAST, Software Composition Analysis (SCA), container scanning, and Infrastructure as Code (IaC) scanning.
• Develop and maintain Infrastructure as Code using Terraform, Bicep, ARM Templates, CloudFormation, or Pulumi.
• Automate application builds, deployments, environment provisioning, configuration management, and release processes.
• Implement deployment strategies such as blue-green, canary, rolling, and zero-downtime deployments.
• Build, deploy, and secure containerized applications using Docker, Kubernetes, OpenShift, AKS, EKS, or GKE.

Responsibilities

• Design, implement, and optimize secure CI/CD pipelines across cloud, hybrid, and on-prem environments.
• Automate provisioning and configuration management, ensuring reproducible deployments.
• Integrate and manage security controls across pipelines and infrastructure.
• Maintain containerized workloads with secure registries and image scanning.
• Enforce policy-as-code and governance for cloud resources.
• Collaborate with development, security, QA, and platform teams to improve reliability and speed.

Skills

CI/CD design

Security integration

Automation & IaC

Threat modelling

Collaboration

Troubleshooting

DevOps discipline

Tools

Azure DevOps

GitHub Actions

GitLab CI/CD

Jenkins

Terraform

Bicep

ARM Templates

Pulumi

Kubernetes

Docker

OpenShift

AKS

EKS

GKE

Azure Key Vault

HashiCorp Vault

CyberArk

Azure Policy

OPA

Gatekeeper

Sentinel

ELK

Grafana

Datadog

Splunk

Job description

Role & responsibilities

We are looking for an experienced Senior DevSecOps Engineer with 10+ years of experience in DevOps engineering, cloud infrastructure, CI/CD automation, and security integration. The candidate will be responsible for building and maintaining secure deployment pipelines, automating infrastructure provisioning, implementing security controls, and ensuring the reliability, scalability, and security of enterprise applications across cloud, hybrid, and on-premises environments.

Preferred candidate profile

• Design, develop, implement, and maintain secure CI/CD pipelines using Azure DevOps, GitHub Actions, GitLab CI/CD, Jenkins, or equivalent tools.
• Integrate security testing tools into CI/CD pipelines, including SAST, DAST, Software Composition Analysis (SCA), container scanning, and Infrastructure as Code (IaC) scanning.
• Develop and maintain Infrastructure as Code using Terraform, Bicep, ARM Templates, CloudFormation, or Pulumi.
• Automate application builds, deployments, environment provisioning, configuration management, and release processes.
• Implement deployment strategies such as blue-green, canary, rolling, and zero-downtime deployments.
• Build, deploy, and secure containerized applications using Docker, Kubernetes, OpenShift, AKS, EKS, or GKE.
• Implement security controls for cloud environments across Microsoft Azure, AWS, and Google Cloud.
• Configure and maintain artifact repositories, container registries, dependency management, and software supply chain security controls.
• Implement secrets management, certificate management, and secure credential handling using Azure Key Vault, HashiCorp Vault, CyberArk, or equivalent solutions.
• Configure identity and access management using Microsoft Entra ID, Okta, OAuth 2.0, OpenID Connect, SAML, RBAC, and privileged access controls.
• Implement policy-as-code and infrastructure governance using Azure Policy, Open Policy Agent (OPA), Gatekeeper, HashiCorp Sentinel, or similar tools.
• Monitor and remediate security vulnerabilities across applications, containers, cloud infrastructure, and deployment pipelines.
• Configure centralized logging, monitoring, alerting, and observability using Azure Monitor, Splunk, Datadog, Dynatrace, ELK Stack, Prometheus, and Grafana.
• Implement automated compliance checks and security baselines aligned with standards such as ISO 27001, SOC 2, PCI DSS, NIST, and CIS Benchmarks, as applicable.
• Perform security reviews, threat modelling, risk assessments, and root cause analysis for infrastructure and deployment-related issues.
• Troubleshoot complex CI/CD, cloud infrastructure, container, networking, and production deployment issues.
• Collaborate with development, security, QA, and platform engineering teams to improve deployment quality, automation, and developer experience.
• Implement operational best practices for system reliability, scalability, performance, cost optimization, and security.
• Document technical solutions, deployment procedures, security controls, and operational runbooks.
• Mentor engineers and contribute to continuous improvement of DevSecOps practices, tools, and engineering standards.