DevSecOps/Secure DevOps Engineer (Kolkata)

2coms; Kolkata District; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

2coms is seeking a hands-on DevSecOps/Secure DevOps Engineer to build and secure AWS environments, automate deployments, and own CI/CD, infrastructure as code, containerized workloads, monitoring, and vulnerability remediation across development, UAT, and production in Kolkata.

You will integrate security into delivery pipelines, independently troubleshoot issues, and drive remediation to closure, with strong Terraform, Docker/Kubernetes, SAST/DAST/SCA, and security tooling experience.

Qualifications

• Hands-on DevSecOps experience with AWS security and infrastructure.
• Proficient in Terraform-based IaC and secure state management.
• Strong CI/CD and deployment automation expertise.
• Hands-on Docker/Kubernetes (EKS preferred).
• Experience with SAST/DAST/SCA and container scanning tools.
• Excellent troubleshooting and incident response skills.

Responsibilities

• Build and manage secure AWS infrastructure with IAM, VPC, S3, RDS, ECR/EKS.
• Design and maintain CI/CD pipelines using Jenkins, GitLab CI, or GitHub Actions.
• Manage deployments across Dev/UAT/Production with release support.
• Implement Terraform IaC with secure state management.
• Secure AWS using least-privilege access, encryption, and monitoring.
• Manage Docker and Kubernetes workloads with RBAC and secrets.
• Integrate SAST/DAST/SCA and container scanning into CI/CD pipelines.
• Identify and remediate critical/high vulnerabilities and VAPT findings.
• Monitor infrastructure, troubleshoot incidents, and improve observability.
• Review environments for drift, exposed services, and insecure credentials.
• Manage Linux administration, DNS/SSL, backup/recovery, and incident triage.
• Support VAPT, security reviews, and client audits.

Skills

DevSecOps

AWS security

CI/CD automation

Terraform / IaC

Docker & Kubernetes

Vulnerability remediation

SAST/DAST/SCA

Linux Bash scripting

Git version control

Tools

Terraform

Jenkins

GitLab CI

GitHub Actions

Docker

Kubernetes

EKS

SonarQube

Trivy

OWASP ZAP

Job description

SUMMARY

DevSecOps/Secure DevOps Engineer

About the Role:

We are hiring a hands-on Secure DevOps Engineer to build and secure AWS environments, automate deployments, and own CI/CD, infrastructure as code, containerized workloads, monitoring, and vulnerability remediation across development, UAT, and production. You'll integrate security into delivery pipelines, independently troubleshoot issues, and drive remediation to closure.

Location: Kolkata

Key Responsibilities

• Build and manage secure AWS infrastructure using EC2, VPC, IAM, S3, RDS, ECR/EKS, ALB, Route 53, CloudWatch, KMS, and related services.
• Design and maintain CI/CD pipelines using Jenkins, GitLab CI, GitHub Actions, or equivalent.
• Manage controlled deployments across Dev/UAT/Production, including configuration management, rollback, and release support.
• Implement Terraform-based Infrastructure as Code with secure state management and version-controlled changes.
• Secure AWS environments using least-privilege IAM, network controls, encryption, secrets management, logging, WAF, CloudTrail, GuardDuty, and Security Hub.
• Manage Docker and Kubernetes/EKS workloads, including image security, RBAC, secrets, and workload access.
• Integrate SAST, DAST, SCA, secrets scanning, IaC scanning, and container vulnerability scanning into CI/CD pipelines.
• Identify, prioritize, remediate, retest, and close Critical/High vulnerabilities and VAPT findings.
• Monitor application infrastructure, troubleshoot deployment/infrastructure incidents, and improve availability and observability.
• Review existing environments for configuration drift, excessive access, exposed services, insecure credentials, manual deployment risks, and monitoring gaps.
• Manage Linux administration, DNS/SSL, backup/recovery, and incident troubleshooting across environments.
• Support VAPT, security reviews, ISO 27001/SOC 2 evidence, technical questionnaires, and client audits.

Requirements

• 4-6 years of hands-on DevSecOps experience.
• Strong practical AWS infrastructure and security experience.
• Hands-on Terraform/Infrastructure - as - Code experience.
• Strong CI/CD and deployment automation experience.
• Hands-on Docker and Kubernetes/EKS experience (practical working knowledge; deep platform engineering only where EKS is a core production dependency).
• Working knowledge of SAST, DAST, SCA, secrets, IaC, and container scanning.
• Experience with SonarQube, Trivy, OWASP ZAP, or equivalent tools.
• Good Linux administration and Bash/Python scripting skills.
• Git/GitLab or equivalent source-control experience.
• Strong troubleshooting, incident handling, vulnerability remediation, deployment rollback, secrets handling, and communication skills

Good to Have

• Azure security exposure such as Defender for Cloud, Entra ID/Azure AD, and Key Vault.
• ISO 27001, SOC 2, or similar compliance exposure.
• AWS, Kubernetes, Terraform, or Security certifications.
• Experience with backup/restore, disaster recovery, and cost optimization.