Lead Engineer - Cloud IND

OSBIndia Private Ltd.; India; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

OSBI in India is seeking a DevSecOps Engineer with 5–8 years of hands-on experience to implement and maintain DevSecOps processes across Azure and multi-Cloud environments. You will join the Cloud Centre of Excellence, collaborate with architecture review boards, security teams, and IT operations to elevate OSB's cloud security posture and enable secure, scalable product delivery.

The role emphasizes security-as-code, automation of security and compliance checks in CI/CD pipelines, and adherence

Qualifications

• 5–8 years of experience in DevSecOps, Azure and multi‑cloud environments.
• Experience implementing security-as-code and security in CI/CD pipelines.
• Proven ability to align security with enterprise guidelines and regulatory controls.

Responsibilities

• Implement, maintain, and optimize DevSecOps processes, tools, and security measures in Azure and multi‑Cloud environments.
• Collaborate with Cloud Security Architect, SecOps and other teams to define security objectives.
• Integrate security practices into the development lifecycle and manage security risks.

Skills

Azure DevOps

Kubernetes

Terraform

Security

CI/CD

IAM

Tools

Helm

GitHub Actions

GitLab CI

Snyk

SonarQube

OWASP ZAP

Trivy

Checkov

OPA/Gatekeeper

Azure Policy

Job description

Posted Tuesday 4 August 2026 at 19:30 | Expires Wednesday 30 September 2026 at 19:29

About us

OsbIndia (OSBI) is an offshore subsidiary of OSB Group. OSBI was incorporated in 2004 as a key part of the OSB Group’s business strategy to provide operational service support. OSBI works with the Group’s trading brands in the UK, providing exceptional customer support and service delivery to new and existing customers.

OSBI also prides itself on offering operational excellence by devising and utilizing process improvements and functional efficiencies.

Job Purpose

The DevSecOps Engineer is a hands-on, delivery-focused individual with 5–8 years of experience responsible for implementing and maintaining DevSecOps processes, tools, and security measures in Azure and multi-Cloud environments. The DevSecOps Engineer will bring their experience to a talented group to further evolve the technical capabilities of OSB, drive improvements across processes and unlock new cloud capabilities for the group.

The DevSecOps Engineer will be a part of the Cloud Centre of Excellence and will work closely with multiple teams within OSB, such as the architecture review board, Engineering Teams, Cloud security team, IT operations, etc., to ensure comprehensive coverage of requirements for the Cloud platform across the Group.

Core Responsibilities

• Implement, maintain, and optimize DevSecOps processes, tools, and security measures in Azure and multi-Cloud environments to support engineering teams in delivering secure, reliable and efficient products.
• Collaborate with the Cloud Security Architect, SecOps and other teams to define and achieve security objectives for projects and programmes, in alignment with business and functional requirements.
• Integrate security best practices, regulations, policies, standards, and procedures into the development lifecycle, managing business and security risks.
• Develop, test, and deploy security-as-code for various Public Cloud compute services, Container platforms, and CI/CD pipelines, leveraging native services and the technologies provided.
• Ensure compliance with industry-standard controls such as CIS/NIST/GDPR/ISO/CSA CCM, and provide support with their implementation.
• Support architects in making design choices that consider security, scalability, and maintainability within Cloud services and CI/CD pipelines.
• Collaborate with application development teams to integrate SAST, SCA, and DAST tools into product feature pipelines and promote secure coding practices.
• Foster a culture of teamwork, collaboration, and continuous improvement among technical and business teams.
• Support with remediating security vulnerabilities in applications and infrastructure.
• Research and utilise modern technologies to meet product requirements, compliance, and controls to enhance OSB’s Cloud security posture.
• Integrate Cloud-based Key Management services with various tools and applications.
• Utilize DevSecOps practices to automate security and compliance policies throughout the development lifecycle.
• Continuously monitor and improve OSB's Cloud security posture using Cloud-native tools and guardrails.

Experience Requirements

• Strong hands-on expertise in Azure DevOps or any other cloud, Primarily on Azure.
• Strong experience with Helm, Terraform, and Kubernetes.
• Build and enhance CI/CD pipelines (Azure DevOps/GitHub Actions/GitLab) with integrated security tools (e.g., SAST, DAST, SCA)
• Automate security scanning and compliance checks into pipelines (e.g., using tools like SonarQube, OWASP ZAP, Checkov, Jib, Trivy, Snyk etc.)
• Develop and enforce Infrastructure as Code (IaC) security policies using Terraform, Bicep, or ARM templates.
• Enable Secrets management and key rotation using Azure Key Vault and related tooling.
• Collaborate with Security teams to align security posture with enterprise guidelines.
• Integrate identity and access management (IAM) into CI/CD workflows using Azure AD, RBAC, and Conditional Access Policies
• Monitor and respond to security alerts, perform vulnerability assessments.
• Maintain logging, monitoring, and threat detection systems (e.g., Microsoft Defender for Cloud, Sentinel, Log Analytics)
• Advocate for shift-left security and support development teams with secure coding and DevSecOps training.
• Own the entire lifecycle of AKS clusters: provisioning, upgrading, scaling, monitoring, and patching (control plane & node pools).
• Manage, monitor, and secure Azure Kubernetes Service (AKS) clusters including node pools, scaling, network policies, and pod security standards.
• Enable RBAC, network policies, and service mesh configurations to enforce zero-trust architecture within AKS.
• Perform regular AKS upgrades, patching, and version compatibility checks.
• Implement and manage container security controls within AKS and enforce policies via tools such as OPA/Gatekeeper or Azure Policy.
• Implement Istio service mesh for traffic routing, security policies (mTLS, ingress/egress), and observability across AKS workloads.
• Integrate Terraform-based security-as-code modules to provision secure infrastructure and services.
• Configure and manage Azure security services, including Azure Key Vault, Defender for Cloud, Azure Sentinel, App Gateway, APIM, and Azure AD PIM.
• Basic understanding of Apache Kafka, including topic-level security, brokers, and integration patterns in a microservices environment
• Ability to create threat models (STRIDE/MITRE ATT&CK) and define application controls/mitigations.

We understand your career and how you progress is as unique as your individual personality. We've created a culture and an environment that encourages personal growth and offers our people opportunities to learn and succeed. Whether you're in the early stages of your career or already have an established profession, we're constantly seeking to hire talented individuals who want to make a difference and grow with us. We're a connected company working together to create a business in which we can all take pride and prosper.

If you want to know more about OSBI, please click on the website link: www.osb-india.com

To know more about OSBI culture please find us on Instagram @OSBINDIA

To find out more about the roles & updates please follow our LinkedIn Page www.linkedin.com/company/osbi.