Senior DevSecOps Engineer

Keka Inc.; Bengaluru; On-site; INR 2,800,000 - 5,000,000; Full time

Job summary

Tarento seeks an experienced DevSecOps Engineer to own secure cloud deployments and production reliability. You will manage AWS workloads across EKS, ECS, and EC2, design blue-green releases, implement automated scanning, and enforce security by design in a fast-moving environment.

You will collaborate with development and QA teams to optimize performance, observability, and incident response, leveraging Jenkins, GitHub Actions, and IaC tooling for scalable CI/CD pipelines.

Qualifications

• Proven hands-on experience managing AWS production environments — EKS, ECS, EC2, S3, CloudFront, API Gateway, WAF, SNS, SES, Secrets Manager, CloudWatch, VPC, IAM.
• Strong understanding of containerization (Docker) and container orchestration (Kubernetes / ECS).
• Proficiency with CI/CD tools — Jenkins, GitLab CI, GitHub Actions, AWS CodePipeline.
• Strong networking knowledge — VPC design, subnets, DNS, routing, SSL/TLS, load balancing, firewall rules.
• Experience implementing DevSecOps practices — scanning, policy enforcement, and compliance monitoring.
• Skilled in troubleshooting across infrastructure, networking, and application layers.
• Experience with monitoring and alerting stacks — Prometheus, Grafana, ELK, CloudWatch.
• Scripting experience using Bash, Python, YAML, and JSON.

Responsibilities

• Hands-on and operational — run, secure, and stabilize production systems.
• Manage deployments across AWS EKS, ECS, and EC2 environments.
• Oversee production operations, incident management, and RCA for critical issues.
• Implement and maintain CI/CD pipelines using Jenkins, GitLab CI, GitHub Actions, or AWS CodePipeline.
• Ensure secure deployment processes through integrated scanning tools and vulnerability management.
• Monitor system health with CloudWatch, Prometheus, Grafana, and ELK.
• Administer AWS services including S3, EC2, ECR, ECS, EKS, Lambda, SNS, SES, Secrets Manager.
• Configure and secure networking components — VPC, subnets, route tables, ALB/NLB, CloudFront, API Gateway, WAF.
• Enforce IAM and least-privilege policies.
• Collaborate with development and QA teams to optimize performance and security.
• Promote a Security by Design and SRE-driven reliability culture.

Skills

AWS

Docker

Kubernetes

DevSecOps

Trivy

Prometheus

CI/CD

Scripting

SonarQube

Security

Education

BE/BTech in IT

Tools

Jenkins

GitLab CI

GitHub Actions

AWS CodePipeline

Job description

Tarento is a fast-growing technology consulting company headquartered in Stockholm, with a strong presence in India and clients across the globe. We specialize in digital transformation, product engineering, and enterprise solutions, working across diverse industries including retail, manufacturing, and healthcare. Our teams combine Nordic values with Indian expertise to deliver innovative, scalable, and high-impact solutions.

We’re proud to be recognized as a Great Place to Work, a testament to our inclusive culture, strong leadership, and commitment to employee well-being and growth. At Tarento, you’ll be part of a collaborative environment where ideas are valued, learning is continuous, and careers are built on passion and purpose.

Role Overview

We are hiring an experienced DevSecOps Engineer with strong expertise in AWS Cloud, container orchestration (Kubernetes / ECS etc.), and secure CI/CD deployments.

The ideal candidate will manage and optimize application deployments, troubleshoot production issues, and apply DevOps and security best practices to ensure high availability, scalability, reliability, and compliance of our cloud workloads.

Key Responsibilities

• This role is hands-on and operational — focused on running, securing, and stabilizing production systems.
• Manage and optimize application deployments across AWS EKS, ECS, and EC2 environments.
• Oversee production operations, incident management, and root cause analysis (RCA) for critical issues.
• Implement and maintain CI/CD pipelines using Jenkins, GitLab CI, GitHub Actions, or AWS CodePipeline.
• Ensure secure deployment processes through integrated scanning tools (Snyk, Trivy, SonarQube, rapid7) and vulnerability management.
• Implement & Monitor system health using CloudWatch, Prometheus, Grafana, and ELK, ensuring proactive alerts and observability.
• Administer and manage AWS services including S3, EC2, ECR, ECS, EKS, Lambda (serverless), SNS, SES, and Secrets Manager.
• Configure and secure networking components — VPC, subnets, route tables, NAT gateways, security groups, load balancers (ALB/NLB), CloudFront, API Gateway, and WAF.
• Enforce AWS IAM and network security best practices, including least-privilege policies and secure key management.
• Collaborate with development and QA teams to optimize application performance, reliability, and security posture.
• Drive and promote a "Security by Design" mindset and SRE-driven reliability culture within the DevOps ecosystem.

Required Skills & Experience:

• Proven hands-on experience managing AWS production environments — EKS, ECS, EC2, S3, CloudFront, API Gateway, WAF, SNS, SES, Secrets Manager, CloudWatch, VPC, IAM.
• Strong understanding of containerization (Docker) and container orchestration (Kubernetes / ECS).
• Proficiency with CI/CD tools — Jenkins, GitLab CI, GitHub Actions, AWS CodePipeline.
• Strong networking knowledge — VPC design, subnets, DNS, routing, SSL/TLS, load balancing, and firewall rules.
• Experience implementing DevSecOps practices — scanning, policy enforcement, and compliance monitoring.
• Skilled in troubleshooting across infrastructure, networking, and application layers.
• Experience with monitoring and alerting stacks — Prometheus, Grafana, ELK, CloudWatch.
• Scripting experience using Bash, Python, YAML, and JSON.

Good to Have Skills:

• Certifications such as AWS Certified DevOps Engineer, CKA / CKAD, or AWS SysOps Administrator.
• Familiarity with service mesh (Istio / App Mesh) and policy-as-code tools (OPA, Kyverno).
• Experience with runtime security platforms (Falco, Aqua, Prisma Cloud).
• Knowledge of Zero Trust architecture and AWS Security Hub / GuardDuty.
• Exposure to incident response automation or resilience engineering practices.

Education:

BE/BTech , Information Technology, or related discipline.

Required Skills

Docker AWS DevSecOps Trivy prometheus ci/cd scripting SonarQube kubernetes Security