Senior DevSecOps Engineer - Gurugram | Hybrid

Job Overview:

We are looking for a Senior DevSecOps Engineer with strong experience in Azure cloud, CI/CD, Infrastructure as Code, and security automation. The role will focus on integrating security into development and operations processes, strengthening DevSecOps practices, and ensuring secure, automated, and compliant deployments.

Key Responsibilities:

- Design, implement, manage, and optimize secure CI/CD pipelines using Azure DevOps.

- Implement and secure Infrastructure as Code (IaC) using Terraform.

- Integrate SAST, DAST, and SCA tools into CI/CD pipelines and manage vulnerabilities.

- Implement security controls and requirements across the SDLC.

- Manage secrets using solutions such as Azure Key Vault and support security monitoring/logging.

- Perform security assessments, infrastructure hardening, and vulnerability management.

- Implement security for Docker and Kubernetes environments.

- Manage network security controls within Infrastructure as Code.

- Implement and manage Policy as Code using OPA.

- Design and manage GitOps workflows using FluxCD, Helm, and Kustomize.

- Automate build and release management processes.

- Mentor engineering teams on secure coding and DevSecOps best practices.

Required Skills & Experience:

- 6-9 years of experience in DevOps/DevSecOps roles.

- Strong hands-on experience with Azure/Azure DevOps.

- Expertise in Terraform and Infrastructure as Code.

- Strong knowledge of CI/CD and security integration.

- Hands-on experience with Docker and Kubernetes.

- Experience with GitOps, FluxCD, Helm, and Kustomize.

- Strong scripting skills in Python, PowerShell, and Shell scripting.

- Experience with security scanning, vulnerability management, and DevSecOps practices.

- Strong communication, collaboration, and mentoring skills.

Preferred Profile:

Candidates with strong hands-on experience in Azure DevSecOps, Terraform, Kubernetes, CI/CD security, and GitOps will be preferred.