Devsecops Engineer

Cloudxtreme; Pune District; Hybrid; INR 1,200,000 - 2,400,000; Full time

Job summary

Cloudxtreme in Pune seeks a DevSecOps Engineer to embed security into the software development lifecycle. You will lead the design of CI/CD pipelines, logging, monitoring, and security practices end-to-end.

Ideal candidates have 5–8 years of DevOps/DevSecOps experience with GitLab, Azure, Terraform, Docker/Kubernetes, and PowerShell/YAML. Strong communication and analytical skills are essential.

Qualifications

• Minimum 5–8 years in DevOps/DevSecOps, relevant 4+ years.
• Strong experience driving DevSecOps adoption and defining best practices.
• Experience designing/implementing CI/CD pipelines and security checks.

Responsibilities

• Design and implement CI/CD pipelines.
• Define and implement logging and monitoring strategies.
• Drive DevSecOps adoption and best practices across teams.
• Implement security requirements, SAST/DAST/SCA in pipelines.
• Secure Azure cloud environments and container platforms.

Skills

DevSecOps

DevOps engineer

Security mindset

Tools

GitLab

Azure

Terraform

Docker/Kubernetes

PowerShell/YAML

Job description

Primary Skill DevSecOps.

Secondary Skill - Azure DevOps, PowerShell/YAML

Location – Pune

Level – SA level CWR

1. Exp: 5 to 8 years (Relevant 4+ years)
2. Notice Period : Immediate to 15 days Only

JD:

• Strong experience as a DevOps engineer.
• Experience in driving DevSecOps adoption and defining best practice, and guiding engineers to adhere to these.
• Experience designing and implementing CI/CD pipelines.
• Experience in defining and implementing logging and monitoring strategies.
• Experience with GitLab, Azure, Azure Key Vault, Infrastructure as Code/Terraform, Docker/Kubernetes and PowerShell/YAML.
• Experience defining and implementing security requirements.
• Agile, Continuous Delivery and DevOps practices are part of your DNA.
• Good communication skills – both written and verbal.
• Strong analytical and problem-solving skills, you like to figure out how things work.
• Passion for learning and innovation.
• Security Automation: Automate security testing (SAST, DAST, SCA) and compliance checks within the CI/CD pipelines (Jenkins, GitLab, Azure DevOps) to proactively identify and mitigate vulnerabilities early in the process.
• Vulnerability Management: Conduct regular security assessments, vulnerability scanning, and penetration testing for web, mobile, and API applications, coordinating remediation efforts with development teams.
• Cloud and Infrastructure Security: Design, implement, and manage secure cloud-based environments (Azure) and containerized platforms (Docker, Kubernetes, OpenShift), ensuring secure configurations and least privilege access controls.
• Compliance and Governance: Establish and enforce security policies and procedures that comply with financial industry regulations (e.g., GDPR, FFIEC, MAS), generating detailed reports and metrics for leadership and auditors.
• Threat Modeling and Incident Response: Perform threat analyses for applications and infrastructure, contributing to cross-functional incident response efforts and post-mortem analysis to prevent future occurrences.