Open Source Developer

S&P Global Market Intelligence; Hyderabad; Hybrid; INR 1,800,000 - 3,200,000; Full time

Job summary

S&P Global Market Intelligence is seeking a DevSecOps Engineer to design and maintain secure CI/CD pipelines, strengthen Kubernetes security, and manage Artifactory governance across enterprise environments. You will collaborate with engineering, platform, and security teams to embed automated security controls and improve delivery throughput.

Ideal candidates have hands-on Kubernetes administration, GitHub Enterprise proficiency, and experience in software supply chain security, with scripting

Qualifications

• Bachelor's degree in Computer Science, Information Security, Engineering, or related field.
• 3+ years in DevOps/DevSecOps, platform engineering, or security engineering.
• Hands-on Kubernetes administration and security controls.
• Experience with JFrog Artifactory in enterprise build/release environments.
• Experience with GitHub Enterprise, repositories, PRs, branch protection, and Actions.
• Understanding of CI/CD, infrastructure automation, and software supply chain security.
• Knowledge of containerization, vulnerability remediation, and scripting with Bash or Python.
• Strong problem-solving and cross-functional collaboration skills.

Responsibilities

• Design and maintain secure CI/CD pipelines using GitHub Enterprise and automation tools.
• Manage JFrog Artifactory governance, access controls, and build/release integration.
• Implement Kubernetes security practices including RBAC, secrets management, network policies, image security.
• Embed security controls into the delivery lifecycle such as code, dependency, and container scanning.
• Collaborate with engineering, platform, and security teams to improve delivery speed, reliability, and risk reduction.
• Support infrastructure-as-code and configuration-as-code to improve consistency and auditability.
• Monitor and troubleshoot pipeline, deployment, and security issues across environments.
• Create documentation, standards, and reusable patterns for secure software delivery.

Skills

CI/CD automation

Kubernetes security

Scripting (Bash/Python)

Security engineering

Cross-functional collaboration

Education

Bachelor's degree or equivalent

Tools

Kubernetes

JFrog Artifactory

GitHub Enterprise

GitHub Actions

Job description

Job Description

We are seeking a DevSecOps Engineer to help build and support secure, scalable software delivery practices. This role will design and maintain secure CI/CD pipelines, strengthen container and artifact security, and improve automation across the software development lifecycle. The ideal candidate brings hands-on experience with Kubernetes, JFrog Artifactory, and GitHub Enterprise, and collaborates effectively with engineering, platform, and security teams.

Key Responsibilities

• Design and maintain secure CI/CD pipelines using GitHub Enterprise and related automation tools.
• Manage JFrog Artifactory, including repository governance, access controls, and integration with build and release processes.
• Implement Kubernetes security best practices, including RBAC, secrets management, network policies, and image security.
• Embed automated security controls into the delivery lifecycle, such as code, dependency, and container scanning.
• Partner with engineering, platform, and security teams to improve delivery speed, reliability, and risk reduction.
• Support infrastructure-as-code and configuration-as-code to improve consistency and auditability.
• Monitor and troubleshoot pipeline, deployment, and security issues across development and runtime environments.
• Create documentation, standards, and reusable patterns for secure software delivery.

Required Qualifications

• Bachelors degree in Computer Science, Information Security, Engineering, or a related field, or equivalent experience.
• 3+ years of experience in DevOps, DevSecOps, platform engineering, or security engineering.
• Hands-on experience with Kubernetes administration and security controls.
• Experience with JFrog Artifactory in enterprise build and release environments.
• Experience with GitHub Enterprise, including repositories, pull requests, branch protection, and GitHub Actions.
• Understanding of CI/CD, infrastructure automation, and software supply chain security.
• Knowledge of containerization, vulnerability remediation, and scripting with Bash, Python, or similar tools.
• Strong problem-solving, communication, and cross-functional collaboration skills.

Preferred Qualifications

• Experience with policy-as-code, secrets management, and runtime security tools.
• Knowledge of artifact scanning, SBOM practices, and open-source dependency governance.
• Experience with Terraform, Helm, or similar infrastructure automation tools.
• Familiarity with compliance, audit controls, and secure engineering standards.

Relevant certifications such as CKA, CKS, Security+, CISSP, or cloud security certifications.