Role Purpose :

The DevSecOps Engineer builds and secures the CI/CD pipelines, on-premise runtime environments, and observability systems supporting the platform. You automate deployment, implement shift-left security scanning, and ensure zero-downtime operations on private enterprise infrastructure.

Key Responsibilities :

- Architect and maintain automated build, test, and release pipelines using modern GitOps patterns.

- Harden on-premise infrastructure (Kubernetes, OpenShift, or bare-metal Linux) in compliance with enterprise security baselines.

- Implement integrated security tooling within the pipeline: SAST, DAST, container vulnerability scanning, secret detection, and Software Bill of Materials (SBOM) generation.

- Deploy and tune centralised observability stacks: logging (OpenSearch/ELK), distributed tracing (OpenTelemetry, Jaeger), and metrics/alerting (Prometheus, Grafana).

- Establish operational runbooks for backup, disaster recovery, zero-downtime rolling upgrades, and infrastructure-as-code (Terraform, Ansible).

Requirements & Qualifications :

- Experience: 6+ years in DevOps / Platform Engineering, with at least 3 years maintaining high-security, on-premise containerised environments.

- Container Orchestration: Advanced Kubernetes/OpenShift management, networking (CNI, service mesh like Istio or Linkerd), and storage plugins (CSI).

- Security & Hardening: Implementation of mTLS, HashiCorp Vault, identity providers (Keycloak/OIDC/SAML), CIS benchmarks, and network security policies.

- Observability: Deep experience instrumenting JVM metrics, Kafka cluster monitoring, and end-to-end distributed tracing.