Lead DevOps

Tresvista Financial Services; Bengaluru; Hybrid; INR 4,000,000 - 7,000,000; Full time

Job summary

TresVista seeks a senior DevSecOps leader to define and drive enterprise-wide security in cloud and CI/CD environments. You will lead security strategy, champion secure software delivery, and mentor teams to embed security across the SDLC.

Responsibilities include building secure pipelines, container security, threat modelling, compliance, and reporting. Strong hands-on security, cloud, IaC, and automation are essential.

Qualifications

• 8–12+ years total IT experience in security or DevOps.
• 5+ years focused on DevSecOps, cloud security, and CI/CD automation.
• Bachelor's or master's degree in computer science, cybersecurity, information security, or related fields.

Responsibilities

• Implement and manage CI/CD pipelines with integrated security controls.
• Deploy and manage container security (Docker, Kubernetes security policies).
• Embed security early in the SDLC with DevSecOps practices.
• Configure and maintain security tools such as SonarQube and Veracode.
• Automate security checks using Python, Bash, PowerShell.
• Manage secrets with Vault, AWS Secrets Manager, or Azure Key Vault.
• Implement cloud security best practices across AWS/Azure.
• Perform threat modelling, vulnerability management, and remediation guidance.
• Monitor and respond to security incidents related to CI/CD or cloud workloads.
• Maintain compliance standards like ISO 27001, SOC2, GDPR, PCI-DSS.

Skills

DevSecOps

CI/CD

Kubernetes Security

Cloud Security

Security Automation

Automation Scripting

SIEM/SOAR

Networking & IAM

Education

Bachelor's/Master's in CS or Security

Cybersecurity

Tools

SonarQube

Veracode

Terraform

AWS/Azure

Job description

About TresVista

TresVista enables Enterprise Intelligence Orchestration (EIO) by supporting the translation of insight into execution. We are a global enterprise that delivers advisory-led solutions with technology and managed services. TresVista works with clients to orchestrate their data and drive outcomes across investment, analytics, and operational workflows, bringing together deep domain expertise with AI enabled execution and a structured approach to decision-making.

Role Overview

This leadership role is responsible for defining and driving TresVista's enterprise-wide DevSecOps strategy. The position ensures secure, scalable, and automated delivery pipelines while embedding security into every stage of the software lifecycle. The role combines technical expertise, strategic vision, and team leadership to strengthen TresVista's security posture across cloud and CI/CD environments.

Key Roles Deliverables

• Implement and manage CI/CD pipelines with integrated security controls
• Deploy and manage container security (Docker, Kubernetes security policies, admission controllers)
• Work closely with development and operations teams to embed security early in the SDLC
• Configure and maintain security tools such as SonarQube, Veracode, etc
• Automate security checks using scripts (Python, Bash, PowerShell)
• Manage secrets using Vault, AWS Secrets Manager, Azure Key Vault, etc
• Implement cloud security best practices across AWS/Azure
• Perform threat modelling, vulnerability management, remediation guidance
• Monitor and respond to security incidents related to CI/CD or cloud workloads
• Maintain compliance standards like ISO 27001, SOC2, GDPR, PCI-DSS
• Prepare DevSecOps documentation and reports

Technical Skills Required

• Strong knowledge of DevOps fundamentals (CI/CD, GitOps, containers, orchestration)
• Practical experience with cloud security tools and IaC security checks
• Ability to automate with Python/PowerShell/Bash
• Hands-on with Kubernetes security (RBAC, Network Policies, Pod Security Standards)
• Experience with SIEM/SOAR tools is a plus (Sentinel, Splunk, QRadar)
• Solid grasp of networking, firewalls, IAM, and encryption methods

Pre Requisites

• Deep expertise in cloud-native security and microservices security
• Strong architectural understanding of CI/CD pipelines across multi-cloud environments
• Ability to lead teams, run security programs, influence cross-functional stakeholders
• Experience designing high-security, high-availability DevSecOps automation frameworks
• Hands-on experience with security incident response processes and post-mortems
• Ability to define roadmap, strategy, and budgets for security tooling

Experience

8-12+ years total IT experience

5+ years focused on DevSecOps, cloud security, and CI/CD automation

Education

Bachelor's or master's degree in computer science, Cybersecurity, Information Security, or related fields

High-value certifications preferred

• CISSP, CISM
• AWS/Azure Cloud Security Specialty
• CKS / CKA
• GIAC Cloud or DevSecOps certifications
• Terraform Associate + Security Engineering certifications

Compensation

The compensation structure will be as per industry standards

Required Skills

• Strong knowledge of DevOps fundamentals (CI/CD, GitOps, containers, orchestration)
• Practical experience with cloud security tools and IaC security checks
• Ability to automate with Python/PowerShell/Bash
• Hands-on with Kubernetes security (RBAC, Network Policies, Pod Security Standards)
• Experience with SIEM/SOAR tools is a plus (Sentinel, Splunk, QRadar)
• Solid grasp of networking, firewalls, IAM, and encryption methods