DevSecOps Engineer

ASCENRA TECHNOLOGIES; Varanasi; Hybrid; INR 3,600,000 - 4,800,000; Full time

Job summary

ASCENRA TECHNOLOGIES is seeking a DevSecOps Engineer to own the cloud estate, delivery pipeline, and security posture end-to-end. You will report to the Head of Engineering and be the sole role of this function in the company.

The role requires 6+ years of production cloud experience, hands-on Terraform and AWS expertise, and leading security-gated CI/CD processes to ensure compliant releases. Hybrid work from Greater Noida.

Qualifications

• 6 years running production cloud infrastructure or 4 years with an advanced degree or equivalent experience.
• 4 years hands-on Terraform managing real environments through their lifecycle.
• 4 years AWS across compute, networking and data: ECS/VPC/RDS/IAM debugging.
• 3 years CI/CD ownership including security gating - SAST, DAST, dependency and secret scanning.

Responsibilities

• Own the AWS estate: ECS Fargate, VPC design, Aurora/RDS, MSK, KMS in ap-south-1.
• Infrastructure as code with Terraform and environment parity for pre-prod vs production.
• Manage GitLab CI/CD with OIDC federation and security gates that block releases.
• Observability setup with CloudWatch, X-Ray and log aggregation.
• Maintain security perimeter: WAF/Shield, Secrets Manager, GuardDuty and Config.

Skills

Scripting: Python or Bash

Incident response/on-call

Security-focused design

Education

B.E./B.Tech or M.Tech in CS/IT

Tools

Terraform

AWS

CI/CD tooling

Job description

DevSecOps Engineer

Own the cloud estate, the delivery pipeline and the security posture of the platform across every environment, end to end. You report to the Head of Engineering and you are the only person in the company whose job this is.

Location

Greater Noida

• Hybrid

Type

Full-time, permanent

Reports to

Head of Engineering

Experience

6+ years

Why this role

The infrastructure is a compliance artefact.

• KMS configuration determines whether we can legally call ourselves data-blind
• Residency you can evidence - ap-south-1, and only ap-south-1
• Bring infrastructure and release management in-house from our partner
• Security gates that can actually block a release

The work

What you'll actually do

What you'll own

• The AWS estate: ECS Fargate, VPC design, Aurora/RDS, MSK, KMS - in ap-south-1, and only ap-south-1
• Infrastructure as code: Terraform with genuine environment parity, so pre-prod tells the truth about production
• The pipeline: GitLab CI/CD with OIDC federation, security gates that can block a release, and a release process a regulator could read
• Observability: CloudWatch, X-Ray and log aggregation, designed to debug a system whose contents we are not allowed to read
• The security perimeter: WAF and Shield, Secrets Manager, private CA and mTLS between services, GuardDuty and Config with rules that mean something
• Continuity: backups, restore drills you have actually run, DR against a seven-year retention obligation, and a cloud bill you can explain line by line

The hard part

• Observability without visibility - most of the standard playbook assumes you can look at the payload. You cannot
• Residency you can evidence: demonstrating data never left India, including in backups, logs, replicas and third-party tooling
• Solo on-call, honestly stated - for the first stretch you are the infrastructure function; we will fund the tooling, protect your time and hire alongside you

Minimum qualification

• 6 years running production cloud infrastructure, or 4 years with an advanced degree - or equivalent practical experience
• 4 years of hands-on Terraform, managing real environments through their whole lifecycle
• 4 years of AWS across compute, networking and data: ECS or equivalent orchestration, VPC design, RDS/Aurora, and IAM you have had to debug
• 3 years of CI/CD ownership including security gating - SAST, DAST, dependency and secret scanning wired into the pipeline
• Working knowledge of applied cryptography in cloud: KMS, envelope encryption, certificate lifecycle, mTLS
• Scripting fluency in Python or Bash
• A real incident and on-call track record, and the writing habit to leave a postmortem behind

Preferred

• Data-residency or sovereignty constraints implemented in practice - ap-south-1 only, and able to prove it
• Kafka or MSK operations, not just consumption
• SOC 2 or ISO 27001 evidence-gathering from the infrastructure side, ideally with a compliance automation platform in the loop
• AWS Solutions Architect, DevOps Engineer or Security Specialty certification
• Private CA operation, WAF/Shield tuning, or GuardDuty and Config beyond default rules

How we work

• Hybrid working style with anchor at our Grandthum office in Greater Noida, Tech Zone IV
• Defined core collaboration hours - outside that, flex your day around its natural shape
• Architecture decisions get written down and argued in the open. Small, reviewable changes. Depth is valued over volume
• Company-issued devices and approved tooling for anything touching customer or compliance data. Given what we build, we hold ourselves to the standard we sell

The practical details

• Location: Grandthum, Tech Zone IV, Greater Noida West, Gautam Buddha Nagar, Uttar Pradesh
• Employment type: full-time, permanent
• Reports to: Head of Engineering
• Education: B.E./B.Tech or M.Tech in CS/IT, or equivalent demonstrated experience - we mean the second part
• Offers are subject to standard background verification, which we will explain before we ask for anything

How we'll interview you

• A 30-minute conversation with our Head of Engineering
• A code and architecture discussion on something you have built and can talk about honestly
• A conversation with the founder about the company, the regulation and where this goes
• Four stages. We aim to complete them inside two weeks and to give you a decision either way

Ideal candidate

You’ll thrive here if this sounds like you

You treat security as design, not as a checklist somebody else wrote

You can shadow a handover, take the Terraform, and then own it

You can prove a claim to someone who assumes you are wrong

You're comfortable being the only person in the company doing this job for a while

You write postmortems and leave systems easier to run than you found them

More open roles

• Other ways to join the team
• Engineering
• Backend Engineer II
• Engineering
• Backend Engineer I
• Engineering
• AI Engineer
• Engineering
• Frontend Engineer
• Engineering
• QA Automation Engineer
• Operations
• IT Administrator