Senior DevSecOps Engineer

gsknch; India; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Haleon is seeking a hands-on DevSecOps Engineer to enhance and safeguard our enterprise DevSecOps ecosystem. You will govern CI/CD workflows across GitHub and Azure DevOps, enforce security tooling and IaC standards, and collaborate with Cloud, Security, and Platform teams to ensure scalable, compliant deployments.

You will implement advanced security features (CodeQL, secret scanning, SCA/DAST), manage Terraform-based infrastructures, and drive platform improvements for developer productivity

Qualifications

Responsibilities

• Administer and optimize GitHub Enterprise Cloud/Server and Azure DevOps at enterprise scale.
• Define and enforce org-wide governance: branch protection, repo standards, permissions, audit logging, SSO/SCIM, and GitHub Actions/ADO runner governance.
• Implement and manage GitHub Advanced Security features (CodeQL, Dependabot), secret scanning, and integrate SAST/DAST, IaC scanning into pipelines.
• Support evaluation and migration of next-gen security tools (e.g., Datadog Code Security) and migration strategies.
• Govern security across CI/CD pipelines, ensuring secure release workflows, multistage approvals, and environment protections.
• Assist teams in designing and deploying secure apps on Azure with cloud security best practices.
• Apply IaC best practices using Terraform (Cloud/Native), including policy checks and drift detection.
• Maintain hardened Docker base images and secure container usage across AKS/ACR.
• Build dashboards, alerts, and audit-ready evidence pipelines for observability and compliance.
• Provide L3 support for DevSecOps platforms and handle escalations.

Skills

DevSecOps expertise

Security governance

Cloud security

Agile/DevOps collaboration

Tools

GitHub Enterprise Cloud

GitHub Enterprise Server

Azure DevOps

SonarQube

Datadog SAST

Docker Desktop

Terraform Cloud/Native Terraform

AKS

ACR

CodeQL

Dependabot

Job description

Welcome to Haleon. We're a purpose-driven, world-class consumer company putting everyday health in the hands of millions. In just three years since our launch, we've grown, evolved and are now entering an exciting new chapter - one filled with bold ambitions and enormous opportunity.

Our trusted portfolio of brands - including Sensodyne®, Panadol®, Advil®, Voltaren®, Theraflu®, Otrivin®, and Centrum® - lead in resilient and growing categories. What sets us apart is our unique blend of deep human understanding and trusted science.

Now it's time to fully realise the full potential of our business and our people. We do this through our Win as One strategy. It puts our purpose - to deliver better everyday health with humanity - at the heart of everything we do. It unites us, inspires us, and challenges us to be better every day, driven by our agile, performance-focused culture.

We are seeking a highly skilled and hands‑on DevSecOps Engineer to support and evolve our enterprise DevSecOps ecosystem. In this role, you will part of governance, engineering, and continuous improvement of our developer platforms, CI/CD pipelines, security tooling, and cloud‑native infrastructure. You will work closely with Cloud, Security, Platform Engineering, and Product teams to ensure that our engineering workflows remain secure, scalable, and compliant across a global, highly regulated environment.

Key responsibilities

• Administer and optimize GitHub Enterprise Cloud / GitHub Enterprise Server, Azure DevOps, SonarQube, Datadog SAST, and Docker Desktop at enterprise scale.
• Define and enforce organization wide governance, including branch protection, repository standards, permissions, audit logging, SSO/SCIM, and GitHub Action / ADO runner governance (managed vs. self-hosted, isolation, patching).
• Implement and manage GitHub Advanced Security features such as CodeQL, Depend Bot, secret scanning with push protection, and integrate SAST, SCA, DAST, IaC scanning, and artifact signing into pipelines.
• Support evaluation, onboarding, and migration of next gen security tools (e.g., Datadog Code Security) & Migration strategies (e.g., SonarQube → Datadog POCs).
• Govern security across CI/CD pipelines in GitHub Actions and Azure DevOps, ensuring secure release workflows, multistage approvals, environment protections, and quality gates.
• Support teams in designing and deploying secure applications on Azure, ensuring alignment with cloud security best practices.
• Implement IaC best practices using Terraform Cloud/Native Terraform, including policy checks, workspace governance, remote backends, and drift detection.
• Maintain hardened Docker base images, enforce secure container usage, and ensure compliance across AKS and ACR environments.
• Build actionable dashboards, alerts, and audit ready evidence pipelines for observability and compliance.
• Provide L3 operational support for DevSecOps platforms, including handling escalations and resolving complex incidents.
• Track and publish DevSecOps adoption, security posture metrics, and platform coverage insights.
• Lead remediation sprints, POCs, platform upgrades, migrations, maintenance activities, and broader architectural improvements.
• Collaborate closely with Cloud, Security, Platform Engineering, and Product teams to address cross functional engineering challenges.
• Drive improvements in developer productivity and experience through self-service infrastructure provisioning, developer portals, and Internal Developer Platform (IDP) capabilities.
• Enable and support standardized development workflows to improve onboarding, consistency, and delivery efficiency across teams.
• Work within Agile delivery models, actively participating in sprint planning, backlog refinement, daily stand‑ups, sprint reviews, and retrospectives.
• Support and leverage Azure-native engineering capabilities including AKS, Azure Functions, Azure DevOps, GitHub Actions, Azure Developer CLI (azd), and Terraform (AzureRM).

Job Posting End Date

2026-08-31

Equal Opportunities

Haleon are committed to mobilising our purpose in a way that represents the diverse consumers and communities who rely on our brands every day. It guides us in creating an inclusive culture, where different backgrounds and views are valued and respected - all in support of understanding and best serving the needs of our consumers and unleashing the full potential of our people. It's important to us that Haleon is a place where all our employees feel they truly belong.

During the application process, we may ask you to share some personal information, which is entirely voluntary. This information ensures we meet certain regulatory and reporting obligations and supports the development, refinement, and execution of our inclusion and belonging programmes that are open to all Haleon employees.

The personal information you provide will be kept confidential, used only for legitimate business purposes, and will never be used in making any employment deci