Devsecops Engineer - 4-8Yrs - Hyderabad

PragmaEdge Software Services Private Limited; Hyderabad; On-site; INR 1,200,000 - 2,200,000; Full time

Job summary

PragmaEdge Software Services Private Limited is seeking an experienced DevSecOps Engineer for Hyderabad. The ideal candidate will bring hands-on expertise in CI/CD automation, security integration, container orchestration, and cloud infrastructure management.

You will administer Azure DevOps, manage repositories and boards, and automate deployments across multiple environments. You will implement secure pipelines with Mend and SonarQube, enforce SBOM and vulnerability remediation, and ensure

Qualifications

• Proven experience designing secure CI/CD pipelines.
• Hands-on with integration of security tooling in pipelines.
• Experience managing containerized apps in cloud environments.
• Experience with Azure DevOps repositories and boards.
• Experience deploying across multiple environments with automated workflows.

Responsibilities

• Design, develop, and maintain CI/CD pipelines using Jenkins and Azure DevOps.
• Develop and maintain Jenkinsfiles, templates, and automation scripts.
• Integrate Git repositories, PRs, branch policies, and automated builds.
• Automate building, packaging, deployment, and release workflows.
• Implement quality gates, automated testing, and pipeline failure handling.
• Troubleshoot pipeline failures and improve build and deployment reliability.
• Manage Azure Boards, Repos, and Pipelines; set up work items and sprints.
• Configure repository permissions, access controls, and security groups.
• Implement branch policies, PR approvals, reviewers, and merge restrictions.
• Maintain secure access management and release policy compliance.
• Integrate Mend and SonarQube for security scanning in pipelines.
• Configure and manage SAST, SCA, and DAST tools.

Skills

CI/CD automation

Security integration

Container orchestration

Cloud infrastructure

Azure DevOps administration

Security scanning

Tools

Jenkins

Azure DevOps

Git

Mend

SonarQube

Kubernetes

OpenShift

Helm

Job description

Hiring: DevSecOps Engineer | 5–8 Years Experience? Location: Hyderabad? Experience: 5–8 Years? Shift Timings: Rotational Shifts? Work Mode: Work from Office (as applicable) We are looking for an experienced DevSecOps Engineer with strong hands‑on experience in CI/CD automation, security integration, container orchestration, cloud infrastructure, Azure DevOps administration, and enterprise release management. The ideal candidate should have practical experience implementing secure CI/CD pipelines, integrating security scanning tools, managing containerized applications, administering Azure DevOps repositories and boards, and automating deployments across multiple environments.

Key Responsibilities

1. 1. CI/CD Pipeline Automation
   • Design, develop, and maintain CI/CD pipelines using Jenkins and Azure DevOps.
   • Develop and maintain Jenkinsfiles, pipeline templates, and reusable automation scripts.
   • Integrate Git repositories, pull requests, branch policies, and automated build processes.
   • Automate application build, packaging, deployment, and release workflows.
   • Implement quality gates, automated testing, and pipeline failure handling.
   • Troubleshoot pipeline failures and improve build and deployment reliability.
2. 2. Azure DevOps Administration & Repository Management
   • Manage Azure DevOps services, including Azure Boards, Azure Repos, and Azure Pipelines.
   • Create and manage Azure Boards, projects, work items, user stories, tasks, bugs, and sprint workflows.
   • Configure and maintain repository permissions, user access, security groups, and project-level access controls.
   • Implement and manage branch policies, pull request approvals, reviewers, build validations, and merge restrictions.
   • Manage repository access, branching strategies, and source code governance.
   • Configure and troubleshoot Azure DevOps permissions, including project, repository, pipeline, and service connection permissions.
   • Maintain secure access management and ensure compliance with organizational development and release policies.
3. 3. DevSecOps & Security Integration
   • Integrate security tools such as Mend and SonarQube into CI/CD pipelines.
   • Implement and manage SAST, SCA, and DAST security scanning.
   • Identify, analyze, track, and remediate vulnerabilities in application code, open-source dependencies, and container images.
   • Configure security gates to prevent vulnerable code and dependencies from progressing through deployment pipelines.
   • Manage vulnerability reports, false-positive analysis, SBOM generation, and security compliance.
   • Implement secure secrets management and pipeline access controls.
4. 4. Containerization & Orchestration
   • Hands‑on experience with Docker and container image management.
   • Deploy and manage applications using Kubernetes and OpenShift.
   • Work with Helm charts for application deployment and configuration management.
   • Troubleshoot pods, deployments, services, ingress, persistent volumes, and networking issues.
   • Implement secure container image practices and vulnerability remediation.
   • Understand Kubernetes RBAC, service accounts, network policies, and resource management.
5. 5. Cloud Infrastructure