Sr. DevSecOps Engineer

Maruti Suzuki India Ltd.; Gurgaon; On-site; INR 1,500,000 - 2,000,000; Full time

Job summary

Maruti Suzuki India Ltd. seeks a Senior DevSecOps Engineer to drive security initiatives across the software development lifecycle. The role requires 4 to 7 years of experience and expertise in automating security in CI/CD pipelines, managing cloud security, and integrating DevOps principles.

The ideal candidate will collaborate with cross-functional teams to enhance software security and develop secure, scalable cloud environments. Applicants should possess strong technical skills in infrastructure as code and experience with security compliance standards.

Qualifications

• Minimum 4 to 7 years of dedicated experience in DevOps or DevSecOps.
• Proven history of owning and securing production cloud pipeline end-to-end.
• Strong understanding of security compliance standards.

Responsibilities

• Integrate and automate security gates into CI/CD pipelines.
• Design and maintain secure cloud environments using IaC.
• Harden and troubleshoot containerized architectures.

Skills

Pipeline Security Automation

Infrastructure as Code (IaC)

Container & Orchestration Security

Secrets Management

Policy & Compliance Automation

Threat Modeling & Governance

Collaboration & Culture

Education

4 to 7 years of experience in DevOps or DevSecOps

Relevant certifications (AWS Certified Security Specialty, CKS, CISSP)

Tools

GitHub Actions

Terraform

Docker

Python

Prometheus

Job description

We are seeking a highly skilled Senior DevSecOps Engineer with 4 to 7 years of experience to join our Digital Enterprise team. In this role, you will be the driving force behind "shifting security left" across our entire software development lifecycle (SDLC). You will bridge the gap between development, operations, and security teams by designing, building, and maintaining secure, automated, and observable cloud-native pipelines. The ideal candidate has deep technical execution skills in infrastructure-as-code (IaC), continuous integration/continuous deployment (CI/CD), and advanced vulnerability management.

Core Responsibilities

• Pipeline Security Automation: Integrate and automate security gates into CI/CD pipelines (e.g., SAST, DAST, SCA, and secrets scanning) without slowing down standard delivery cadences.
• Infrastructure as Code (IaC): Design, implement, and maintain highly secure cloud environments using code orchestration tools.
• Container & Orchestration Security: Harden, deploy, and troubleshoot containerized architectures and microservices while implementing admission control policies.
• Secrets Management: Architect and manage enterprise secrets, cryptographic keys, and credential rotation workflows.
• Policy & Compliance Automation: Implement Policy-as-Code to dynamically block insecure cluster deployments and gather compliance evidence for regulatory audits.
• Threat Modeling & Governance: Lead proactive threat-modeling reviews during early system architecture designs to identify systemic risks.
• Collaboration & Culture: Coach development teams on secure coding standards, triage vulnerabilities, and conduct joint incident responses.

Technical Skills Matrix

Required Technologies & Skills

AWS, Azure, or GCP (Advanced identity management and network isolation)

CI/CD Tools

GitHub Actions, GitLab CI, Jenkins, or Azure DevOps

Infrastructure as Code

Terraform, OpenTofu, Ansible, or CloudFormation

Containers & Orchestration

Docker, Kubernetes, Helm, and GitOps engines (Argo CD or Flux)

Security Tooling

Snyk, Semgrep, Trivy, Checkov, Veracode, SonarCloud, or Gitleaks

Secrets & Identity

HashiCorp Vault, Cloud KMS, OAuth2, JWT, and CyberArk

Scripting & Automation

Python, Bash, Go, or PowerShell

Observability

Prometheus, Grafana, Loki, or OpenTelemetry protocols

Experience & Qualifications

• Overall Experience: Minimum 4 to 7 years of dedicated experience in DevOps, DevSecOps, or Platform/Cloud Security engineering.
• Production Scale: Proven history of owning and securing production cloud pipeline end-to-end at enterprise scale.
• Framework Familiarity: Strong understanding of security compliance standards like SOC 2, ISO 27001, NIST, or OWASP top 10.
• Problem Solving: Excellent debugging capability across complex Unix/Linux networking layers and distributed systems.

Preferred (Nice-to-Have) Qualifications

• Relevant certifications: AWS Certified Security Specialty, Certified Kubernetes Security Specialist (CKS), or CISSP.
• Exposure to automated incident triage workflows or AIOps/MLOps validation pipelines.

Soft Skills

• Clear Communicator: Ability to explain deep technical vulnerabilities and operations issues to business stakeholders and developers alike.
• Mentorship Mindset: Passionate about running secure-code workshops and upskilling junior engineers on security policies.
• Cross-Functional Partner: Adept at finding consensus between the friction of "strict security controls" and the speed of "developer productivity".