Devsecops Engineer - 4-8Yrs - Hyderabad

Pragma Edge Software Services; Hyderabad; On-site; INR 1,500,000 - 2,300,000; Full time

Job summary

Pragma Edge Software Services in Hyderabad is seeking an experienced DevSecOps Engineer with hands-on CICD automation, security integration, container orchestration, cloud infrastructure, and Azure DevOps administration.

The ideal candidate will design and maintain CI/CD pipelines with Jenkins and Azure DevOps, manage repositories and boards, and integrate security tools across environments to ensure secure deployments and governance.

Qualifications

• 5–8 years of DevSecOps experience in enterprise environments.
• Hands-on CI/CD automation and security integration.
• Experience with Jenkins, Azure DevOps, Git, and release management.

Responsibilities

• Design, develop, and maintain CI/CD pipelines using Jenkins and Azure DevOps.
• Develop Jenkinsfiles, pipeline templates, and reusable automation scripts.
• Integrate Git repositories, pull requests, branch policies, and automated build processes.
• Automate application build, packaging, deployment, and release workflows.
• Implement quality gates, automated testing, and pipeline failure handling.
• Troubleshoot pipeline failures and improve build and deployment reliability.
• Manage Azure Boards, Repos, and Pipelines.
• Configure repository permissions and branch policies.
• Manage security tooling integrations (SAST, SCA, DAST).
• Secure secrets management and access controls.
• Docker containerization and image management.

Skills

CICD automation

Security integration

Containerization

Orchestration

Cloud infrastructure

Azure DevOps administration

Enterprise release management

Mend

SonarQube

Tools

Docker

Job description

Job Summary

We are looking for an experienced DevSecOps Engineer with strong hands‑on experience in CICD automation, security integration, container orchestration, cloud infrastructure, Azure DevOps administration, and enterprise release management.

The ideal candidate should have practical experience implementing secure CICD pipelines, integrating security scanning tools, managing containerized applications, administering Azure DevOps repositories and boards, and automating deployments across multiple environments.

Location: Hyderabad

Experience: 5-8 Years

Shift Timings: Rotational Shifts

Work Mode: Work from Office (as applicable)

Key Responsibilities

1. CICD Pipeline Automation
   • Design, develop, and maintain CICD pipelines using Jenkins and Azure DevOps.
   • Develop and maintain Jenkinsfiles, pipeline templates, and reusable automation scripts.
   • Integrate Git repositories, pull requests, branch policies, and automated build processes.
   • Automate application build, packaging, deployment, and release workflows.
   • Implement quality gates, automated testing, and pipeline failure handling.
   • Troubleshoot pipeline failures and improve build and deployment reliability.
2. Azure DevOps Administration & Repository Management
   • Manage Azure DevOps services, including Azure Boards, Azure Repos, and Azure Pipelines.
   • Create and manage Azure Boards, projects, work items, user stories, tasks, bugs, and sprint workflows.
   • Configure and maintain repository permissions, user access, security groups, and project‑level access controls.
   • Implement and manage branch policies, pull request approvals, reviewers, build validations, and merge restrictions.
   • Manage repository access, branching strategies, and source code governance.
   • Configure and troubleshoot Azure DevOps permissions, including project, repository, pipeline, and service connection permissions.
   • Maintain secure access management and ensure compliance with organizational development and release policies.
3. DevSecOps & Security Integration
   • Integrate security tools such as Mend and SonarQube into CICD pipelines.
   • Implement and manage SAST, SCA, and DAST security scanning.
   • Identify, analyze, track, and remediate vulnerabilities in application code, open‑source dependencies, and container images.
   • Configure security gates to prevent vulnerable code and dependencies from progressing through deployment pipelines.
   • Manage vulnerability reports, false‑positive analysis, SBOM generation, and security compliance.
   • Implement secure secrets management and pipeline access controls.
4. Containerization & Orchestration
   • Hands‑on experience with Docker and container image management.

Key Skills

• CICD automation
• Security integration
• Containerization
• Orchestration
• Cloud infrastructure
• Azure DevOps administration
• Enterprise release management
• Mend
• SonarQube