DevSecOps Engineer

Roles & Responsibilities

Job Description

The DevSecOps Engineer is responsible for designing, automating, and maintaining secure, scalable, and resilient infrastructure and deployment pipelines. The role requires expertise in cloud platforms, automation, security best practices, and modern DevOps methodologies. Engineers must work in an agile, collaborative environment, ensuring seamless integration of security into development workflows and infrastructure operations.

Responsibilities :

• Develop automation and processes to enable teams to deploy, manage, scale, and monitor applications in data centers and cloud environments.
• Troubleshoot and resolve system and application issues across platforms, participating in on-call escalations for critical incidents.
• Take ownership of end-to-end infrastructure and security solutions across the organization.
• Deploy and manage monitoring tools to track infrastructure performance, utilization, and health.
• Implement configuration management systems for business continuity and automate disaster recovery measures.
• Provision virtual machines, databases, application containers, and licenses for development teams.
• Configure and maintain CI / CD pipelines, incorporating streamlined change management and release processes.
• Develop scripts and automation tools to support software build, integration, and deployment across development and production environments.
• Automate the configuration management of development, quality assurance, and production workloads.
• Design, build, optimize, and monitor automation systems to identify bottlenecks and maximize service availability.
• Implement security practices that comply with industry standards to protect the organization’s data and infrastructure.
• Plan, implement, and monitor system security architecture, including threat and risk assessments.
• Perform security checks, such as vulnerability assessments and system hardening, and troubleshoot security incidents.
• Apply secure configurations and best practices when implementing security controls in infrastructure and applications.

Requirement

Security & Compliance :

Bonus Experience (Added Advantage) :

Security certifications such as CREST, CISSP, CISM, or relevant cloud security credentials.

Experience working in an organization that successfully implemented DevSecOps transformation.

Experience with security and compliance frameworks (ISO 27001, NIST, CIS benchmarks).

Hands-on experience with API security, secrets management, and zero-trust architectures.

Knowledge of service mesh security implementations (Istio, Linkerd).

Tell employers what skills you have

Puppet

Python scripting

Kubernetes

Azure

Cloud Security

Pipelines

PowerShell scripting

High Availability

Agile

Automation Tools

ISO 27001

Configuration Management

Python

automation scripting

Continuous Integration

Docker

Ansible

Virtualization

Software Development