Tech S And T - Devsecops And AI Engineer - GDSN02

Ernst & Young Advisory Services Sdn Bhd; Bengaluru; On-site; INR 1,500,000 - 2,300,000; Full time

Job summary

EY Bengaluru seeks a DevSecOps & AI Engineer to design and implement secure CI/CD pipelines and integrate AI/ML workflows across cloud-native platforms.

You will collaborate with data, ML, DevOps, and security teams to apply shift-left security, automate provisioning, and build scalable models and AI services.

Qualifications

• Experience building secure CI/CD pipelines and integrating DevSecOps tooling.
• Proficient in cloud, DevOps, and AI/ML workflows with hands-on tooling.
• Strong scripting in Python and shell; automation mindset.

Responsibilities

• Build and maintain secure CI/CD pipelines for AI workloads.
• Integrate DevSecOps practices across pipelines and implement SBOM and secret scanning.
• Automate ML workflows and MLOps pipelines for training, packaging, and deployment.
• Develop AI inference and model serving solutions with scalable architectures.
• Collaborate with data, ML, DevOps, and security teams and contribute to documentation.

Skills

Terraform

Kubernetes

CI/CD

Docker

Python

Bash

PowerShell

GitHub Actions

GitLab CI

Azure DevOps

MLflow

Kubeflow

Education

B.Tech./BS in Computer Science

Tools

Snyk

SonarQube

Trivy

Checkmarx

GitLeaks

TruffleHog

Syft

CycloneDX

LangChain

LlamaIndex

KServe

Seldon Core

BentoML

Ray Serve

Prometheus

Grafana

Elk/Loki

Job description

Select how often (in days) to receive an alert:

Select how often (in days) to receive an alert:

Tech S And T - Devsecops And AI Engineer - GDSN02

Other locations: Anywhere in Country

Date: Sep 4, 2026

Requisition ID: 1738066

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Job Description

• Build and maintain secure CI/CD pipelines using GitHub Actions, GitLab CI, Jenkins, Azure DevOps, and CircleCI for application, data, and AI workloads.
• Integrate DevSecOps practices into pipelines using Snyk, SonarQube, Checkmarx, Trivy, Anchore, and OWASP tools for continuous security scanning.
• Implement shift-left security with secret scanning (GitLeaks, TruffleHog), SBOM automation (Syft, CycloneDX), and dependency management (Dependabot, Renovate).
• Work with containerization (Docker/Podman) and Kubernetes (EKS, AKS, GKE) including Helm/Kustomize for deployments and secure image pipelines.
• Develop and automate MLOps workflows using MLflow, Kubeflow, Azure ML, SageMaker, or Vertex AI for model training, packaging, and deployment.
• Build and maintain RAG/AI integration pipelines using LangChain, LlamaIndex, Semantic Kernel, and vector databases like Pinecone, Weaviate, or FAISS.
• Implement AI inference systems using Seldon Core, KServe, BentoML, Ray Serve, or Triton Inference Server for scalable model serving.
• Automate ETL/ELT and data feature pipelines using Airflow, Prefect, Dagster, dbt, or Kafka/Kinesis for AI model data feeds.
• Work with IaC tools such as Terraform, Pulumi, CloudFormation, or Azure Bicep to provision cloud and AI infrastructure.
• Implement event-driven architectures using serverless functions (AWS Lambda, Azure Functions, Cloud Functions) and messaging systems like Kafka or RabbitMQ.
• Maintain monitoring and logging using Prometheus, Grafana, ELK/Loki, OpenTelemetry, Jaeger, Datadog, or New Relic for both app and ML workloads.
• Handle model & data observability using tools like Evidently AI, Arize AI, WhyLabs, or Fiddler for drift, bias, and performance tracking.
• Secure cloud environments using IAM best practices (AWS IAM, Azure AD/Entra ID, GCP IAM), workload identities, and least-privilege controls.
• Support configuration management using Ansible, Chef, or SaltStack for environment consistency and automation.
• Develop scripts in Python, Bash, or SQL for automation, data processing, validation, and orchestration of ML workflows.
• Implement API integrations for AI systems using REST, gRPC, or GraphQL for model consumption and downstream applications.
• Use GitOps tools like Argo CD or Flux for automated, secure Kubernetes deployments and progressive delivery.
• Apply AI security practices including guardrails, prompt protection, model validation, and safe inference techniques using industry tools.
• Ensure compliance with data governance, privacy, and security standards including GDPR, CCPA, and cloud security best practices.
• Collaborate with data engineers, ML engineers, DevOps teams, and security teams, contributing to documentation, reviews, and mentoring juniors.

Desired Profile

• Looking for a DevSecOps & AI Engineer with 4-7 years of hands-on experience in cloud, DevOps, and AI/ML workflows.
• Strong skills in Terraform, Kubernetes, Helm, Docker, and CI/CD (GitHub Actions, GitLab CI, Jenkins, Azure DevOps).
• Proficient in Python and scripting (Bash/PowerShell) with good automation mindset.
• Experience implementing DevSecOps practices—SAST/DAST, container scanning, secrets scanning, SBOM, and policy-as-code.
• Exposure to MLOps/AI integration using MLflow, Kubeflow, SageMaker, Azure ML, KServe, or Seldon.
• Familiar with cloud (AWS/Azure/GCP), configuration management (Ansible/Puppet), and GitOps tools (Argo CD/Flux).
• Strong communication, troubleshooting, and collaboration skills with ability to work cross-functionally.

Experience : 4 to 7 years

Education : B.Tech. / BS in Computer Science

Technical Skills & Certifications

• Terraform, Pulumi, and Infrastructure as Code (IaC)
• Python, Bash, PowerShell scripting
• DevSecOps tools: Snyk, SonarQube, Trivy, Checkmarx, GitLeaks, TruffleHog
• Policy-as-code (OPA/Gatekeeper, Kyverno) and SBOM tools (Syft, CycloneDX)
• Model serving frameworks: KServe, Seldon Core, BentoML, Ray Serve
• Vector DBs & RAG stack: Pinecone, Weaviate, FAISS, Chroma, LangChain, LlamaIndex
• Monitoring & observability: Prometheus, Grafana, ELK/Loki, OpenTelemetry, Jaeger
• Configuration management: Ansible, Puppet
• GitOps: Argo CD, Flux
• Serverless: AWS Lambda, Azure Functions, Google Cloud Functions.

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.

Provider

Description

Enabled

SAP as service provider

• "route" is used for session stickiness
• "careerSiteCompanyId" is used to send the request to the correct data center
• "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor

LinkedIn