[UN5K6LBC] DevSecOps Engineer

ZettaMine Labs Pvt. Ltd.; Bengaluru; On-site; INR 3,500,000 - 5,500,000; Full time

Job summary

ZettaMine Labs Pvt. Ltd. in Bengaluru is looking for a DevSecOps Engineer – Azure DevOps to design, implement, and secure Azure DevOps CI/CD pipelines in a high-security environment. The role requires strong hands-on expertise in DevSecOps practices, Secure SDLC, and automation across the software delivery lifecycle.

5+ years of experience, immediate / 15 days notice period, and deep knowledge of Azure security services, IaC, and container security are essential to succeed in this position.

Qualifications

• 5+ years of hands-on experience in DevSecOps, Azure DevOps, and related domains.

Responsibilities

• Design, implement, and maintain secure and scalable Azure DevOps CI/CD pipelines.
• Embed security controls and automation throughout the SDLC.
• Implement DevSecOps practices across development, testing, deployment, and production environments.
• Integrate SAST, SCA, DAST, secrets detection, IaC scanning, and container security into CI/CD pipelines.
• Configure and maintain Azure DevOps repositories, pipelines, artifacts, boards, security policies, and release processes.
• Implement automated security gates and quality checks to prevent vulnerable code and infrastructure from progressing through the delivery lifecycle.
• Build and maintain reusable CI/CD templates, pipeline components, and DevSecOps automation frameworks.
• Implement IaC using Terraform, Bicep, ARM templates, or similar technologies.
• Secure Azure infrastructure, applications, containers, Kubernetes/AKS workloads, and deployment pipelines.
• Manage Azure Key Vault for secure credentials, secrets, and application configuration.
• Monitor pipeline security, deployment failures, vulnerabilities, and compliance violations.

Skills

DevSecOps

Azure DevOps

CI/CD pipelines

Infrastructure as Code

Cloud Security

Container Security

Security Automation

Vulnerability Management

Secure SDLC

Azure DevOps Services

Terraform

PowerShell/Bash/Python

Tools

Azure DevOps

Terraform

Bicep

ARM templates

AKS

Docker

Kubernetes

Job description

We are looking for DevSecOps Engineer – Azure DevOps with exciting project opportunities.

Notice Period: Immediate / 15 Days

Experience: 5+ Years

Relevant Experience: Strong hands-on experience in DevSecOps, Azure DevOps, CI/CD, Infrastructure as Code, Cloud Security, Container Security, Security Automation, Vulnerability Management, and Secure SDLC.

Mandatory Skills:

• 5+ years of experience in DevOps, DevSecOps, Cloud Engineering, Platform Engineering, or related roles.
• Strong hands-on experience with Microsoft Azure and Azure DevOps.
• Strong experience designing, implementing, and managing CI/CD pipelines using Azure DevOps.
• Strong understanding of DevSecOps practices and Secure SDLC.
• Hands‑on experience integrating security controls into CI/CD pipelines.
• Strong experience with Azure Repos, Azure Pipelines, Azure Artifacts, Azure Boards, and Azure DevOps.
• Strong experience with Infrastructure as Code (IaC) using Terraform, ARM templates, Bicep, or similar technologies.
• Experience implementing automated SAST, SCA, DAST, secrets scanning, IaC scanning, and container security within CI/CD pipelines.
• Strong understanding of cloud security principles and Azure security services.
• Experience with Docker and Kubernetes / AKS and container security.
• Strong understanding of identity and access management, RBAC, managed identities, service principals, and secrets management.
• Experience with Azure Key Vault and secure management of credentials, certificates, and secrets.
• Experience with Git-based source control, branching strategies, pull requests, code quality checks, and security gates.
• Strong scripting/programming skills using PowerShell, Bash, Python, or similar technologies.
• Experience with vulnerability identification, remediation tracking, security automation, and compliance controls.
• Strong troubleshooting and problem-solving skills across build, release, deployment, infrastructure, and security pipelines.

Good-to-Have:

• Experience with Microsoft Defender for Cloud and Microsoft Defender for DevOps.
• Experience with security tools such as SonarQube, Snyk, Checkmarx, Veracode, Fortify, Semgrep, Trivy, Prisma Cloud, or similar tools.
• Experience with GitHub Advanced Security and secret/dependency scanning.
• Experience with Terraform Cloud / Enterprise.
• Experience with Helm, Argo CD, Flux, or GitOps.
• Experience securing AKS and Kubernetes workloads.
• Experience with Azure Policy, Azure Monitor, Log Analytics, Application Insights, and Microsoft Sentinel.
• Knowledge of OWASP Top 10, secure coding, vulnerability management, and threat modeling.
• Experience implementing security quality gates and automated compliance checks.
• Experience with Azure Container Registry (ACR) and container image scanning.
• Knowledge of API security and microservices security.
• Experience with cloud governance, security standards, and regulatory compliance.
• Azure certifications such as AZ-400, AZ-500, AZ-104, or AZ-305.

Key Responsibilities:

• Design, implement, and maintain secure and scalable Azure DevOps CI/CD pipelines.
• Embed security controls and automation throughout the software development lifecycle.
• Implement DevSecOps practices across development, testing, deployment, and production environments.
• Integrate SAST, SCA, DAST, secrets detection, IaC scanning, and container security into CI/CD pipelines.
• Configure and maintain Azure DevOps repositories, pipelines, artifacts, boards, security policies, and release processes.
• Implement automated security gates and quality checks to prevent vulnerable code and infrastructure from progressing through the delivery lifecycle.
• Build and maintain reusable CI/CD templates, pipeline components, and DevSecOps automation frameworks.
• Implement Infrastructure as Code using Terraform, Bicep, ARM templates, or similar technologies.
• Secure Azure infrastructure, applications, containers, Kubernetes/AKS workloads, and deployment pipelines.
• Implement secure authentication, authorization, RBAC, managed identities, and secrets management.
• Manage and integrate Azure Key Vault for secure credentials, secrets, certificates, and application configuration.
• Implement vulnerability scanning and remediation workflows across application, infrastructure, dependency, and container layers.
• Configure security and compliance controls within Azure DevOps and Azure environments.
• Monitor pipeline security, deployment failures, vulnerabilities, and compliance violations.
• Collaborate with Application Security, Cloud Security, Development, QA, Infrastructure, and Platform Engineering teams.
• Identify security gaps in existing DevOps processes and recommend automation-driven improvements.
• Implement secure branching, pull-request validation, code-review controls, and repository security standards.
• Develop scripts and automation using PowerShell, Bash, Python, or similar technologies.
• Support Kubernetes/AKS deployment automation and container security.
• Troubleshoot complex CI/CD, deployment, infrastructure, and security issues.
• Establish DevSecOps standards, reusable patterns, documentation, and best practices across engineering teams.
• Continuously improve pipeline performance, security, reliability, developer experience, and operational efficiency.

Who Can Apply?

5+ years of experience in DevOps, DevSecOps, Cloud Engineering, Platform Engineering, or related areas.

Strong hands‑on experience with Azure and Azure DevOps.

Strong experience developing and managing Azure DevOps CI/CD pipelines.

Strong understanding of DevSecOps and Secure SDLC.

Experience integrating SAST, SCA, DAST, Secrets Detection, IaC Scanning, and Container Security into CI/CD pipelines.

Strong experience with Infrastructure as Code, particularly Terraform, Bicep, or ARM.

Hands‑on experience with Docker, Kubernetes, and/or AKS.

Strong understanding of Azure Security, IAM, RBAC, Managed Identity, and Key Vault.

Experience implementing security gates, vulnerability scanning, and automated compliance controls.

Strong experience with Git, branching strategies, pull requests, and source-code security.

Good scripting skills in PowerShell, Bash, Python, or similar technologies.

Experience with DevSecOps/security tools such as SonarQube, Snyk, Checkmarx, Veracode, Fortify, Trivy, Semgrep, or equivalent.

Strong troubleshooting, automation, communication, collaboration, and stakeholder management skills.

We look forward to connecting with you!!