Senior Lead - DevSecOps

Zealant Consulting Group; Bengaluru; Sur place; INR 4 200 000 - 6 400 000; Plein temps

Résumé du poste

Zealant Consulting Group is seeking an experienced DevOps Lead – DevSecOps & Platform Engineering to define and drive our DevOps, DevSecOps, and platform initiatives across on‑prem, cloud, and hybrid environments.

You will lead automation, CI/CD, Kubernetes platforms, security engineering, and reliability initiatives while mentoring engineering teams to build scalable and secure infrastructure.

Qualifications

• 15+ years in DevOps/SRE/infrastructure/platform engineering.
• 4+ years leading engineering teams or platforms.
• Hands-on with on‑prem and cloud (AWS/Azure/GCP).
• Strong Bash, Python, or Go scripting.
• Production CI/CD with Jenkins, GitLab CI/CD, Argo CD; GitOps.
• Extensive Kubernetes platform experience in production.
• IaC with Terraform/Ansible/Pulumi; state management and drift control.
• DevSecOps expertise across Zero Trust, IAM, encryption, secrets.
• Familiar with ISO 27001, SOC 2, HIPAA compliance.
• Strong networking, security, reliability, and incident response.

Responsabilités

• Define and execute DevOps, DevSecOps, and platform engineering roadmap.
• Lead, mentor, and develop DevOps/SRE engineers and set standards.
• Collaborate with engineering, security, product, and leadership on architecture.
• Own technology selection, budgets, and build-vs-buy decisions.
• Architect scalable CI/CD pipelines across on‑prem, cloud, and hybrid.
• Drive IaC adoption with Terraform/Ansible/Pulumi; modularization.
• Lead Kubernetes strategy with multi-cluster/multi-region deployments.
• Implement GitOps delivery using Argo CD and related tools.
• Ensure security controls, compliance, and risk management.
• Oversee reliability, incident management, DR, and postmortems.

Connaissances

Terraform

GitOps

Jenkins

CI/CD

Kubernetes

Cloud platforms

Python

Go

Bash scripting

Ansible

Pulumi

Security & compliance

IaC (Terraform/Ansible/Pulumi)

Observability

Docker

Formation

Bachelor's or Master's in CS/Engineering

Outils

Argo CD

Jenkins

GitLab CI/CD

CircleCI

Terraform

Ansible

Pulumi

Description du poste

DevOps Lead – DevSecOps & Platform Engineering

About The Role

We are looking for an experienced DevOps Lead – DevSecOps & Platform Engineering to define and lead our DevOps, DevSecOps, and platform engineering strategy across on-premises, cloud, and hybrid environments.

In this leadership role, you will drive infrastructure automation, CI/CD, Kubernetes platforms, cloud operations, security engineering, and reliability initiatives. You will lead and mentor engineering teams while ensuring platforms remain scalable, resilient, secure, compliant, and cost-efficient.

The ideal candidate combines deep hands-on technical expertise with strategic leadership, strong stakeholder management, and experience operating large-scale production infrastructure.

Key Responsibilities

• Leadership & Platform Strategy
• Define and execute the DevOps, DevSecOps, SRE, and platform engineering roadmap.
• Lead, mentor, and develop DevOps/SRE engineers, establishing engineering standards for code reviews, on-call operations, and incident management.
• Collaborate with engineering, security, product, and executive leadership on architecture, capacity planning, and infrastructure cost optimization.
• Own technology selection, vendor management, tooling budgets, and build-versus-buy decisions.
• Drive platform standardization, automation, and continuous operational improvement.
• Infrastructure, Cloud & Automation
• Architect and govern scalable CI/CD pipelines across on-premises, cloud (AWS, Azure, GCP), and hybrid environments.
• Drive Infrastructure as Code (IaC) adoption using Terraform, Ansible, or Pulumi, including reusable modules, state management, and configuration drift detection.
• Lead containerization and Kubernetes platform strategy, including multi-cluster and multi-region deployments.
• Design and manage hybrid cloud workloads using platforms such as Google Anthos or Azure Arc.
• Build and maintain automated infrastructure provisioning, configuration management, deployment, and rollback processes.
• Establish GitOps-based delivery practices using tools such as Argo CD and related CI/CD platforms.
• Ensure infrastructure scalability, availability, performance, and operational efficiency.
• DevSecOps, Security & Compliance
• Integrate security into the software development lifecycle through SAST, DAST, SCA, container scanning, IaC scanning, and secrets management.
• Implement software supply‑chain security practices, including SBOM generation, SLSA principles, and container image signing.
• Enforce Zero Trust architecture, least‑privilege IAM, encryption at rest and in transit, key management, and network segmentation.
• Implement policy as code using OPA/Gatekeeper, Kyverno, or HashiCorp Sentinel.
• Lead risk assessments, threat modeling, vulnerability management, patch governance, and remediation tracking against defined SLAs.
• Establish security controls, audit readiness, and compliance processes aligned with ISO 27001, SOC 2, HIPAA, and other applicable frameworks.
• Partner with security and compliance teams to strengthen infrastructure governance and secure‑by‑design engineering practices.
• Reliability, Observability & Incident Management
• Define and implement Service Level Objectives (SLOs), Service Level Indicators (SLIs), and error budgets.
• Establish observability across infrastructure and applications using Prometheus, Grafana, ELK Stack, and OpenTelemetry.
• Lead incident response, root cause analysis, postmortems, and corrective action tracking.
• Develop strategies to improve availability, performance, fault tolerance, and production reliability.
• Own disaster recovery (DR) and business continuity planning, including regular failover and recovery testing against defined RTO and RPO targets.
• Establish operational metrics and continuously improve platform reliability and engineering productivity.
• Networking, Governance & Cost Optimization
• Oversee infrastructure networking, including firewalls, VPNs, DNS, load balancing, and network security controls.
• Drive infrastructure capacity planning, resource utilization, and cloud cost optimization through FinOps practices.
• Establish governance standards for infrastructure provisioning, deployment workflows, access controls, and operational processes.
• Communicate platform risks, security posture, reliability metrics, and technology roadmaps to senior leadership.

Required Qualifications

• Bachelor's or Master's degree in Computer Science, Engineering, or a related discipline.
• 15+ years of experience in DevOps, SRE, infrastructure engineering, or platform engineering, including at least 4 years leading engineering teams or platforms.
• Deep expertise in on-premises infrastructure and hands‑on experience with at least two major cloud platforms: AWS, Microsoft Azure, or Google Cloud Platform (GCP).
• Strong scripting and automation skills in Bash, Python, or Go.
• Production experience with CI/CD tools such as Jenkins, GitLab CI/CD, Argo CD, or CircleCI, along with GitOps practices.
• Extensive experience designing and operating large-scale Kubernetes platforms in production, including container orchestration and cluster management.
• Strong Infrastructure as Code experience using Terraform, Ansible, Pulumi, or equivalent tools.
• Proven DevSecOps expertise across Zero Trust, IAM, PKI, encryption, secrets management, vulnerability management, and security auditing.
• Practical understanding of compliance frameworks such as ISO 27001, SOC 2, and HIPAA.
• Strong knowledge of networking fundamentals, firewalls, VPNs, DNS, load balancing, and network segmentation.
• Experience defining reliability standards, observability practices, incident response, and disaster recovery processes.
• Excellent communication and stakeholder management skills, with the ability to present technical strategy, operational risks, and investment priorities to senior leadership.

Preferred Qualifications

• Relevant certifications such as CKA, CKS, AWS Certified DevOps Engineer – Professional, AWS/Azure Security Specialty, CISSP, or CCSP.
• Experience with service mesh technologies such as Istio or Linkerd.
• Familiarity with eBPF-based security tooling and runtime protection solutions such as Falco.
• Experience with security and vulnerability management tools such as HashiCorp Vault, Trivy, Snyk, SonarQube, Wiz, or Prisma Cloud.
• Proven experience leading cloud migrations, data center modernization, or on‑premises-to-hybrid cloud transformations.
• Exposure to FinOps, platform-as-a-product models, and developer self‑service platforms.
• Experience establishing engineering governance, security policies, and operational best practices across multiple teams.

Personal Attributes

• Strategic thinker with the ability to remain hands‑on when required.
• Strong analytical, troubleshooting, and decision‑making skills under pressure.
• Clear communicator who builds trust across engineering, security, and business teams.
• Collaborative leader who develops teams and drives accountability.
• Passionate about automation, operational excellence, resilience, and secure‑by‑design systems.

Role Highlights

• Lead DevOps, DevSecOps, and platform engineering strategy.
• Drive cloud, on‑premises, and hybrid infrastructure modernization.
• Build secure, scalable, and highly available Kubernetes platforms.
• Influence engineering standards, security governance, and reliability practices.
• Partner with senior leadership on technology strategy and cost optimization.

Skills: terraform,gitops,jenkins,cloud security,infrastructure as code (iac),python,devsecops,kubernetes,security compliance,devops,sre,reliability engineering,go automation,docker,observability