Position: DevSecOps Engineer

Experience: 6-8 Years Employment Type: Full-Time

Job Summary

We are looking for a highly skilled DevSecOps Engineer with 68 years of experience with strong experience working in on-premises environments while possessing the capability to build and manage CI/CD pipelines, Kubernetes platforms, understanding on API Gateway implementation, and cloud-native architectures.

The candidate should have a strong understanding of Security-by-Design principles, ZTA, Microservices Architecture, and Event-Driven Architectures (EDA), enabling organizations to accelerate software delivery while maintaining security, scalability, and compliance. Positive to have Azure ML-Ops exposure

Key Responsibilities

Mandatory Skills:

1.DevOps & CI/CD

- Design, implement, and manage CI/CD pipelines using tools such as Bitbucket, or similar platforms along with Vault Integrations.
- Automate build, testing, deployment, and release management processes.
- Implement Infrastructure as Code (IaC) and configuration management practices.
- Manage artifact lifecycle and package repositories using JFrog Artifactory.
- Integrate JFrog Xray for vulnerability scanning, license compliance checks, and software supply chain security. Familiar with Trivy scans.
- Implement automated quality and security gates within CI/CD pipelines to ensure secure release management.
- Establish DevSecOps practices covering source code, dependencies, containers, and infrastructure security.
- Support application deployment across development, QA, UAT, and production environments.

2.Kubernetes & Containerization

- Configure,



Deploy and manage Kubernetes clusters in on-premises environments.
- Implement containerization strategies using Docker and Kubernetes.
- Configure ingress controllers, service mesh, autoscaling, monitoring, and logging.
- Ensure high availability, resilience, and performance of containerized workloads.

3. Security & DevSecOps

- Hands-on experience with JFrog Platform (Artifactory, Xray).
- Implement API Runtime scans, SAST, DAST, SCA, Container Security, and Secret Scanning tools.
- Conduct vulnerability assessment and remediation processes.
- Ensure compliance with security standards and best practices.
- Collaborate with security teams to establish DevSecOps governance frameworks.

4. Platform Engineering

- Implement monitoring, logging, and observability solutions using Prometheus, Grafana, etc.
- Automate infrastructure provisioning using Terraform, Ansible, or similar tools.
- Troubleshoot complex production issues and optimize platform performance.
- Drive operational excellence and platform modernization initiatives.

Desirable Skills:

1. API Management & Integration

- Design and manage API Gateway solutions such as Kong, Apigee, or similar platforms.
- Implement API authentication, authorization, throttling, rate limiting, and monitoring.

2.



Event-Driven & Microservices Architecture

- Support implementation of Event-Driven Architectures using Kafka, RabbitMQ, or similar messaging platforms.
- Design deployment patterns for microservices-based applications.
- Ensure service reliability, observability, and scalability across environments.
- Participate in architecture discussions related to services and integration patterns.

Required Qualifications

Experience

- 68 years of experience in DevOps, Platform Engineering, or DevSecOps roles.
- Robust experience supporting and managing on-premises infrastructure environments is must.
- Hands-on experience building enterprise-grade CI/CD pipelines.
- Experience operating Kubernetes clusters in all environments.

Technical Skills

- CI/CD: Jenkins, GitLab CI/CD, Azure DevOps.
- Containers: Docker, Kubernetes, Helm.
- Infrastructure as Code: Terraform, Ansible.
- Source Control: Git, Bitbucket, GitHub, GitLab.
- Operating Systems: Windows, Linux (RHEL, Ubuntu, CentOS).
- Scripting: Python, Bash, PowerShell.
- Monitoring: Prometheus, Grafana, ELK/OpenSearch.
- Messaging/Event Streaming: Kafka, RabbitMQ.
- API Gateway: Kong, Apigee, NGINX.
- Security: SonarQube, Snyk, Veracode, trivy, JFrog Xray within CI/CD pipelines.

Key Competencies

- Strong troubleshooting and analytical skills.
- Security-first mindset.
- Excellent stakeholder communication skills.
- Ability to drive platform modernization initiatives.
- Strong understanding of automation and operational excellence.
- Experience collaborating with development, security, and infrastructure teams.

📌 Devsecops Engineer (Telangana)
🏢 Independent Recruitment Consultant (freelancer)
📍 Telangana