Experience: 7–10 Years
Location: Bangalore — Bangalore candidates preferred
CTC: ₹13–15 LPA
Interview: Saturday
L1: Face-to-Face in Bangalore
Shift: Up to 10 PM US shift; otherwise normal shift
Role Type: Senior Individual Contributor

Role Overview
We are looking for a Senior DevSecOps Engineer to design, build, and operate the cryptographic and infrastructure foundation for an Agentic Authentication Platform.

The role has three core technology areas:
AWS CloudHSM + Terraform/Terragrunt + JFrog Artifactory
The engineer will also work across AWS, EKS/Kubernetes, Helm, GitOps, CI/CD, cloud networking, Zero Trust, and security-focused platform engineering .

Key Responsibilities
AWS CloudHSM
Design and deploy CloudHSM clusters.
Perform key ceremonies and key rotation.
Manage high-availability operations.
Integrate CloudHSM with downstream authentication and signing services.
Terraform / Terragrunt
Design multi-workplace infrastructure across Dev, QA, Stage, and Production .
Build reusable/DRY Terraform modules.
Manage remote-state governance.
Implement Policy-as-Code using OPA/Sentinel in CI.
JFrog Artifactory
Manage enterprise artifact governance.
Manage signed container images and Helm charts.
Implement SBOM generation and scanning gates.




Integrate artifact promotion with GitOps workflows.
EKS / Kubernetes
Manage production AWS EKS environments.
Work with Helm charts and CRDs.
Support service mesh implementations.
Implement ingress/egress controls and Zero Trust principles.
Security & Observability
Build observability for delegation chains and audit trails.
Ensure auditability of who acted on whose behalf, with what scope, and when .
Work with IAM, KMS, networking, DNS, firewalls, routing, and AWS security services.
Support GitOps and CI/CD pipelines.

Mandatory Skills
AWS CloudHSM – hands-on production experience
Terraform + Terragrunt
JFrog Artifactory
7+ years in DevSecOps / Platform Engineering / SRE with security focus
Strong AWS – VPC, IAM, KMS, EKS, Route 53, security services
Production Kubernetes / EKS
Helm & CRDs
Cloud networking – DNS, firewalls, routing
GitOps & CI/CD
Zero Trust principles

Preferred Skills
Cryptographic delegation flows - OAuth 2.0 token exchange, workload identity federation.
Familiarity with agentic security patterns (scoped-capability tokens).
Policy-as-Code (OPA / Sentinel).
AWS Professional / Specialty certs; Kubernetes certs (CKA, CKAD, CKS).

📌 Senior DevSecOps Engineer – AWS CloudHSM | Terraform | JFrog (Bengaluru)
🏢 Asian Hires
📍 Bengaluru