DevSecOps Engineer

Experience: 45 Years | AWS Certified

About the Role

We are looking for a DevSecOps Engineer with 45 years of hands-on experience to strengthen our cloud infrastructure, CI/CD, application security, and operational security practices. The ideal candidate will have strong AWS and DevOps fundamentals, an AWS certification, good understanding of Information Security (InfoSec) responsibilities within DevOps, and practical experience with networking, domain management, hosting, and production operations.

Key Responsibilities

Design, implement, maintain, and improve secure CI/CD pipelines for application build, test, security scanning, and deployment.

Embed security controls and DevSecOps practices into the software development and deployment lifecycle.

Work closely with development, QA, infrastructure, and InfoSec teams to identify and remediate security and operational risks.

Manage and maintain AWS infrastructure with a strong focus on security, availability, scalability, and cost awareness.

Implement and maintain IAM roles, policies, least-privilege access, secrets management, encryption, logging, monitoring, and security controls.

Support vulnerability management, dependency/container/image scanning, configuration reviews, and remediation tracking.

Monitor CI/CD and production infrastructure for security events, failures, performance issues, and operational anomalies.

Design and troubleshoot networking components including VPCs, subnets, routing, security groups, NACLs, load balancers, DNS, VPNs, NAT, and firewalls.

Manage domain registration, DNS records, SSL/TLS certificates, renewals, redirects, subdomains, and domain-related production issues.

Manage website hosting environments and coordinate DNS/SSL changes across development, UAT, and production environments.

Provide basic administration and operational support for WordPress websites, including hosting, DNS, SSL, backups, updates, plugins, and security hardening.





Automate repetitive infrastructure and deployment tasks using scripting and Infrastructure as Code where appropriate.

Maintain technical documentation, runbooks, deployment procedures, access controls, and incident-resolution records.

Required Technical Skills

4–5 years of relevant experience in DevOps, DevSecOps, Cloud Infrastructure, or related engineering roles.

AWS certification is required (AWS Certified Solutions Architect, DevOps Engineer, Security Specialty, or equivalent preferred).

Strong hands-on understanding of AWS services such as EC2, VPC, IAM, S3, RDS, CloudWatch, CloudTrail, ELB/ALB/NLB, Route 53, Auto Scaling, and related services.

Good understanding of CI/CD concepts and hands-on experience with tools such as Jenkins, GitHub Actions, GitLab CI/CD, AWS CodePipeline/CodeBuild, or equivalent.

Solid understanding of Git, branching strategies, build automation, artifact management, deployment strategies, and rollback mechanisms. Good understanding of InfoSec in a DevOps context, including IAM, least privilege, secrets management, encryption, TLS/SSL, vulnerability management, secure configurations, audit logging, and security monitoring.

Good networking fundamentals: TCP/IP, HTTP/HTTPS, DNS, ports, routing, NAT, VPN, proxies, firewalls, load balancers, subnets, and security groups.

Hands-on understanding of domain hosting and management, DNS records, nameservers, SSL certificates, CDN/proxy concepts, and domain renewal processes.

Basic to intermediate understanding of WordPress hosting and administration, including web server configuration, PHP/runtime basics, database connectivity, plugins, backups, updates, SSL, DNS, and security.

Good Linux administration and troubleshooting skills.





Ability to troubleshoot production incidents and communicate technical issues clearly.

DevSecOps / InfoSec Expectations

Understand security as a shared responsibility across development, infrastructure, and operations. Implement security gates in CI/CD pipelines where appropriate, including SAST, SCA/dependency scanning, container/image scanning, secrets detection, and configuration checks. Ensure production access follows least-privilege and role-based access principles. Support secure handling of credentials, API keys, certificates, tokens, and other sensitive configuration.

Understand common web and infrastructure security risks such as OWASP vulnerabilities, exposed services, insecure configurations, weak access controls, and outdated dependencies.

Assist with security audits, evidence collection, remediation activities, and compliance requirements.

Preferred Skills

Terraform or other Infrastructure as Code tools.

Docker and container security; Kubernetes/EKS knowledge is an advantage.

AWS security services and security best practices.

Jenkins administration and pipeline-as-code.

Ansible or configuration-management experience.

NGINX/Apache administration.

Monitoring and observability tools such as Grafana, Prometheus, CloudWatch, ELK/OpenSearch, or similar.

Experience with vulnerability-management or security-scanning tools. Key Competencies

Strong ownership and accountability for production infrastructure and security.

Analytical and problem-solving mindset.

Good communication and documentation skills.

Ability to work independently and collaborate across engineering, InfoSec, and business teams.

Strong attention to security, reliability, and operational detail.

Role Summary This role is suited for an engineer who can bridge DevOps and Information Security—someone who can build and operate AWS infrastructure, create secure CI/CD pipelines, understand network and domain management, troubleshoot production issues, and contribute to the organization's overall security posture.

📌 Devsecops Engineer (Gurugram)
🏢 Mufinpay Payment Solutions Delhi
📍 Gurugram