Senior DevOps Engineer

Ecolab Food Safety & Hygiene Solutions Private Limited; Bengaluru; On-site; INR 4,000,000 - 6,000,000; Full time

Job summary

Ecolab Food Safety & Hygiene Solutions Private Limited in Bengaluru is seeking a Senior DevOps Engineer to design and implement scalable CI/CD pipelines, automate cloud infrastructure, and strengthen security across the software delivery lifecycle.

The candidate will focus on Azure DevOps, Terraform, Kubernetes, and scripting with PowerShell or Python, while mentoring juniors and improving deployment reliability.

Qualifications

• Senior DevOps Engineer with 4–7 years of experience in cloud and automation.
• Strong hands-on with Azure DevOps, YAML pipelines, and CI/CD practices.
• Experience embedding security checks (DevSecOps) into pipelines.
• Proficiency in Terraform, Bicep, and ARM templates for infra provisioning.

Responsibilities

• Design, implement, and maintain end-to-end CI/CD pipelines in Azure DevOps.
• Create reusable YAML templates and centralized CI/CD frameworks.
• Own DevOps solutions across development, test, staging, and production.
• Implement deployment strategies: rolling, blue-green, canary, promotions.
• Manage Git/GitHub/Azure Repos workflows, branch policies, and approvals.
• Integrate security checks and compliance gates into pipelines.

Skills

Azure DevOps

CI/CD

DevSecOps

Cloud automation

PowerShell

Python

Bash

Terraform

ARM Templates

Bicep

Git/GitHub/Azure Repos

Docker

Kubernetes / AKS

Education

Bachelor’s degree in Computer Science / Engineering or related field

Tools

GitHub

Azure Repos

Docker

Kubernetes

Terraform

Bicep

ARM Templates

PowerShell

Python

Job description

Role Overview

Senior DevOps Engineer Experience 4–7 Years Primary Focus Azure DevOps, CI/CD, DevSecOps, Cloud & Infrastructure Automation Cloud Microsoft Azure Source Control Git / GitHub / Azure Repos Containers Docker / Kubernetes Automation YAML, PowerShell, Bash, Python Infrastructure as Code Terraform / Bicep / ARM Templates Preferred Domain Experience DataOps, Snowflake, ADF, Azure Cloud

Key Responsibilities

• Design, develop, implement, and maintain end-to-end CI/CD pipelines using Azure DevOps.
• Create reusable, parameterized, and secure multi-stage YAML pipelines for build, test, validation, deployment, and release automation.
• Own DevOps solutions across development, test/QA, staging, and production environments.
• Implement deployment strategies such as rolling, blue-green, canary, and controlled/manual promotion where appropriate.
• Implement branch policies, pull-request validation, build validation, approvals, and environment protection mechanisms.
• Manage Git/GitHub/Azure Repos workflows, branching strategies, merge policies, tagging, and release/versioning practices.
• Integrate automated quality and security checks into CI/CD pipelines, including static analysis, dependency scanning, secret detection, and compliance gates.
• Manage build artifacts, package/version management, artifact retention, and promotion across environments.
• Implement infrastructure provisioning and configuration management using Terraform, Bicep, or ARM templates.
• Automate operational activities using PowerShell, Bash, Python, or equivalent scripting languages.
• Containerize applications using Docker and manage image build, tagging, scanning, storage, and deployment processes.
• Deploy and manage containerized workloads on Kubernetes/AKS, including deployments, services, config maps, secrets, ingress, scaling, and troubleshooting.
• Implement secure authentication and authorization using Azure service connections, managed identities, Key Vault, secrets, and least-privilege access.
• Integrate Azure Key Vault and other secret-management mechanisms into CI/CD pipelines without exposing credentials in logs or source control.
• Monitor pipeline execution, application deployments, infrastructure health, and production issues; perform root-cause analysis and corrective actions.
• Support production releases, change management, deployment approvals, release coordination, rollback, and recovery activities.
• Design reliable rollback and recovery mechanisms for failed or partially completed deployments.
• Collaborate with developers, QA, architects, security teams, and operations teams to improve deployment reliability and developer experience.
• Identify opportunities to eliminate manual steps and continuously improve automation, deployment frequency, reliability, and lead time.
• Create and maintain technical documentation, deployment standards, runbooks, troubleshooting guides, and operational procedures.
• Mentor junior DevOps engineers and contribute to DevOps standards, reusable templates, and best practices.

Technical Skills – Azure DevOps & CI/CD

• Strong hands-on experience with Azure DevOps Services: Repos, Pipelines, Boards, Test Plans, Artifacts, Environments, and Service Connections.
• Advanced understanding of YAML pipeline concepts: stages, jobs, steps, templates, parameters, variables, variable groups, conditions, expressions, dependencies, and outputs.
• Experience designing reusable pipeline templates and centralized CI/CD frameworks for multiple applications/projects.
• Experience with CI triggers, PR validation, path filters, scheduled/manual triggers, branch policies, and gated deployments.
• Hands-on experience with environment approvals, checks, deployment gates, and production release controls.
• Strong understanding of pipeline agents, agent pools, self-hosted agents, Microsoft-hosted agents, caching, workspaces, and artifacts.
• Ability to troubleshoot pipeline failures involving authentication, permissions, agents, dependencies, scripts, artifacts, and deployment tasks.

DevSecOps & Security

• Implement security controls throughout the software delivery lifecycle rather than treating security as a final release step.
• Integrate SAST, dependency scanning, container image scanning, secret scanning, and policy/compliance checks into CI/CD.
• Apply least-privilege access, secure service connections, managed identities, and controlled production permissions.
• Protect secrets using Azure Key Vault or equivalent secret-management platforms.
• Understand secure handling of credentials, tokens, certificates, private keys, and pipeline variables.
• Support vulnerability remediation, security findings triage, and release blocking based on defined severity thresholds.

Git, GitHub & Release Management

• Strong understanding of Git commands, branching, merging, rebasing, cherry-picking, tagging, and conflict resolution.
• Experience with GitHub/Azure Repos pull requests, code reviews, branch protection, reviewers, and merge strategies.
• Experience with GitFlow, trunk-based development, or equivalent enterprise branching strategies.
• Ability to define versioning and release strategies suitable for multiple environments.
• Experience supporting hotfixes, emergency releases, rollback, and release recovery.

Docker & Kubernetes / AKS

• Build optimized Docker images using Dockerfiles and multi-stage builds.
• Understand image tagging, registries, image lifecycle, vulnerabilities, and immutable release practices.
• Deploy and troubleshoot workloads in Kubernetes/AKS environments.
• Hands-on understanding of Pods, Deployments, ReplicaSets, Services, ConfigMaps, Secrets, Namespaces, Ingress, probes, requests/limits, and autoscaling.
• Troubleshoot common Kubernetes issues such as CrashLoopBackOff, ImagePullBackOff, pending pods, service connectivity, failed probes, and configuration issues.
• Understand Kubernetes rollout, rollback, scaling, and deployment health validation.

Infrastructure as Code & Azure

• Hands-on experience with Terraform, Bicep, or ARM templates for repeatable Azure infrastructure provisioning.
• Understand Terraform state, remote state, modules, variables, outputs, workspaces, plan/apply, and state locking.
• Experience provisioning and managing Azure resources such as Resource Groups, Storage Accounts, Key Vault, VNets, NSGs, Azure Kubernetes Service, App Services, and monitoring components.
• Understand Azure RBAC, subscriptions, resource groups, managed identities, service principals, and network/security fundamentals.
• Implement infrastructure changes through CI/CD with validation, plan/review, approval, and controlled deployment.

Preferred / Added Advantage – DataOps & Data Platforms

• Knowledge of DataOps processes and CI/CD patterns for data engineering and analytics workloads.
• Hands-on experience with Snowflake deployment and CI/CD, including SQL versioning, deployment ordering, validation, dry runs, approvals, and controlled execution.
• Experience with Snowflake objects such as databases, schemas, tables, views, procedures, roles, and warehouse‑related deployment considerations.
• Knowledge of Azure Data Factory (ADF), pipelines, linked services, datasets, triggers, integration runtimes, and CI/CD promotion.
• Exposure to Databricks CI/CD, Databricks Asset Bundles (DABs), notebooks/jobs/pipelines, and environment promotion is an advantage.

Scripting & Automation

• Strong scripting ability in at least one of PowerShell, Bash, or Python.
• Ability to write maintainable automation scripts for deployment, validation, environment checks, housekeeping, and operational tasks.
• Ability to parse files, process JSON/YAML, consume REST APIs, handle exit codes, and implement robust error handling.

Monitoring, Troubleshooting & Reliability

• Strong troubleshooting mindset across CI/CD, cloud infrastructure, containers, Kubernetes, networking, authentication, and application deployment issues.
• Experience with Azure Monitor, Log Analytics, Application Insights, or equivalent monitoring and logging platforms.
• Perform root‑cause analysis and document corrective/preventive actions.
• Understand deployment health checks, operational metrics, alerting, incident response, and service reliability.

Senior‑Level Expectations

• Own DevOps deliverables independently from requirement gathering through implementation, testing, production rollout, and support.
• Make sound technical decisions around pipeline architecture, security, deployment strategy, and automation.
• Build reusable frameworks and templates instead of creating one‑off pipelines.
• Proactively identify risks and bottlenecks in the software delivery lifecycle.
• Lead troubleshooting of complex CI/CD and production deployment incidents.
• Review pipeline code and infrastructure changes and provide technical guidance to team members.
• Mentor junior engineers and promote engineering standards and automation best practices.
• Communicate clearly with technical and non-technical stakeholders, especially during production releases and incidents.

Preferred Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field.
• 4–7 years of professional experience in DevOps, Cloud Engineering, Platform Engineering, or a related role.
• Azure certifications such as AZ‑400, AZ‑104, or relevant Microsoft certifications are an advantage.
• Experience working in Agile/Scrum environments.
• Experience working with enterprise change‑management and production release processes.

Experience Level Senior Level