Job Title : DevSecOps Engineer

Experience: 4+ Years

Location: Mumbai/Chennai/Pune

Employment Type: Long-Term Contract

Job Overview

We are seeking a highly skilled Senior DevOps / DevSecOps Engineer to design, implement, automate, and maintain cloud infrastructure and deployment platforms for enterprise applications.

The role will focus heavily on Microsoft Azure, Kubernetes/AKS, Argo CD, Argo Workflows, Terraform, Helm, Azure Blob Storage, Azure File Share, CI/CD automation, security, observability, and production operations. The successful candidate will work closely with application development, architecture, security, QA, and platform teams to deliver reliable, secure, scalable, and highly automated application platforms across Dev, QA/UAT, and Production environments.

Key Responsibilities

Azure Cloud Infrastructure

- Design, provision, configure, and maintain Azure cloud infrastructure for enterprise application workloads.
- Manage Azure resources for application hosting, networking, security, storage, identity, and monitoring.
- Deploy and manage containerized workloads using Azure Kubernetes Service (AKS).
- Manage Azure Container Registry (ACR) for container image storage and distribution.
- Configure and maintain Azure Key Vault for secrets, certificates, and sensitive configuration.
- Manage Azure Storage Accounts, Blob Storage, and Azure File Shares.
- Support Azure database infrastructure, backups, monitoring, start/stop operations, and performance-related activities.
- Implement Azure RBAC and Managed Identities following least-privilege principles.
- Support scalability, high availability, disaster recovery, and operational resilience.

Kubernetes / AKS

- Design, deploy, configure, and maintain Kubernetes/AKS environments.
- Deploy and manage microservices and containerized workloads.
- Work with Kubernetes resources including:
- Deployments
- Services
- ConfigMaps
- Secrets
- Ingress
- Service Accounts
- Jobs/CronJobs
- Namespaces
- Configure resource requests/limits, autoscaling, health probes, and rollout strategies.
- Troubleshoot pod failures, scheduling issues, image-pull failures, networking issues, configuration problems, and deployment failures.
- Implement and maintain Kubernetes RBAC, service discovery, networking, and persistent storage.
- Support production Kubernetes operations and incident resolution.

Argo CD / GitOps

- Implement and maintain GitOps-based deployment models using Argo CD.
- Configure Argo CD applications, projects, repositories, environments, and synchronization strategies.
- Maintain Helm-based deployment configurations and environment-specific values.
- Troubleshoot synchronization, health-check, deployment, and configuration issues.
- Implement controlled and auditable deployments across Dev, QA/UAT, and Production.
- Promote declarative and version-controlled application delivery practices.

Argo Workflows

- Design, configure, and maintain Argo Workflows for application and platform automation.
- Develop workflow templates for build, validation, migration, deployment, and operational activities.
- Troubleshoot workflow failures, dependencies, parameters, artifacts, secrets, and execution issues.
- Integrate Argo Workflows with Kubernetes and other project services.

Terraform / Infrastructure as Code

- Provision and manage Azure infrastructure using Terraform.
- Develop reusable and maintainable Terraform modules.




- Manage Terraform providers, variables, outputs, state, dependencies, and workplace-specific configurations.
- Implement infrastructure changes through controlled CI/CD pipelines.
- Troubleshoot Terraform plans, state issues, dependencies, and deployment failures.
- Follow Infrastructure as Code best practices to ensure consistent and repeatable environments.

Helm & Application Configuration

- Develop and maintain Helm charts for Kubernetes applications.
- Manage environment-specific Helm values and configurations.
- Integrate Kubernetes deployments with Azure Key Vault and secure configuration mechanisms.
- Ensure sensitive information is never hardcoded in source repositories or deployment manifests.
- Standardize application configuration across Dev, QA/UAT, and Production.

CI/CD & Release Automation

- Design, implement, and maintain CI/CD pipelines for microservices and platform components.
- Automate:
- Source validation
- Application builds
- Unit/integration testing
- Container image creation
- Security scanning
- Image publishing
- Deployment
- Release validation
- Integrate pipelines with Git, ACR, Kubernetes, Helm, Argo CD, and Argo Workflows.
- Implement controlled promotion strategies across Dev, QA/UAT, and Production.
- Troubleshoot pipeline failures, deployment issues, and release problems.

DevSecOps & Security

- Integrate security practices throughout CI/CD and infrastructure processes.
- Implement container image and dependency vulnerability scanning.
- Secure credentials, tokens, passwords, certificates, and API keys.
- Use Azure Key Vault or approved secret-management mechanisms.
- Implement least-privilege access using Azure RBAC, Kubernetes RBAC, and Managed Identities.
- Review Kubernetes manifests, Terraform configurations, Dockerfiles, and Helm charts for security issues.
- Support security remediation, compliance, and governance requirements.
- Experience with tools such as Trivy, SonarQube, OPA, or Kyverno is an advantage.

Networking

- Work with Azure and Kubernetes networking components including:
- Azure Virtual Networks
- Subnets
- NSGs
- Private Endpoints
- Private DNS
- DNS
- Load Balancers
- Application Gateway
- Ingress
- Routing
- Firewall configuration
- Troubleshoot application connectivity, DNS, ingress, load-balancing, and network-related deployment issues.
- Understand internal vs. external traffic and connectivity between Azure services and AKS workloads.

Monitoring, Logging & Observability

- Implement monitoring, logging, alerting, and observability for infrastructure and applications.
- Monitor:
- Kubernetes clusters
- Pods and nodes
- Application health
- CPU/memory utilization
- Deployment health
- Pipeline health
- Infrastructure availability
- Work with Azure Monitor, Log Analytics, Application Insights, Prometheus, and Grafana.
- Investigate production incidents using logs, metrics, Kubernetes events, and diagnostic tools.
- Support alerting, incident management, root-cause analysis, and preventive actions.





Production Support

- Provide L2/L3 DevOps and platform support for production environments.
- Troubleshoot infrastructure, Kubernetes, networking, configuration, and deployment issues.
- Support production releases, rollback, and recovery activities.
- Perform root-cause analysis for recurring issues.
- Participate in incident management and post-incident reviews.
- Maintain operational documentation and troubleshooting procedures.

Database & Migration Support

- Support deployment-related database migration requirements for microservices.
- Integrate automated database migrations into application deployment processes where required.
- Ensure migrations are executed securely and consistently across environments.
- Coordinate with development teams on migration-related deployment activities.

Collaboration & Technical Leadership

- Collaborate closely with developers, architects, QA, security, and infrastructure teams.
- Define and enforce DevOps and deployment standards.
- Participate in architecture and infrastructure discussions.
- Review Terraform, Helm, Kubernetes, and CI/CD changes.
- Mentor junior DevOps engineers.
- Identify opportunities to improve automation, reliability, security, performance, and deployment efficiency.

Must-Have Technical Skills

• Microsoft Azure

• Kubernetes / AKS

• Docker

• Argo CD / GitOps

• Argo Workflows

• Terraform / Infrastructure as Code

• Helm

• Robust CI/CD pipeline experience

• Git

• Azure Key Vault

• Azure Container Registry (ACR)

• Azure VNet, Subnets, NSGs, DNS, Load Balancers, Ingress, and Routing

• Azure RBAC, Kubernetes RBAC, Managed Identity, secrets management, and vulnerability scanning

• Linux administration and troubleshooting

• Azure Monitor / Log Analytics and/or Prometheus / Grafana

• Bash and/or Python scripting

• Strong troubleshooting skills across Kubernetes, Azure, networking, CI/CD, and cloud infrastructure

Good-to-Have Skills

• GCP infrastructure exposure

• Bitbucket Pipelines

• Azure Application Gateway

• Private Endpoints and Private DNS

• Prometheus and Grafana

• SonarQube

• Trivy or other container vulnerability scanners

• OPA / Kyverno or Kubernetes policy enforcement

• Service Mesh

• OpenTelemetry

• SRE practices

• Disaster Recovery and Business Continuity

• Cloud cost optimization

• Enterprise-scale production platform experience

• Node.js and Python programming knowledge

Expected Hands-on Experience

The successful candidate should be able to independently:

• Provision Azure infrastructure using Terraform

• Create and maintain AKS-based Kubernetes environments

• Deploy microservices using Helm

• Configure and manage Argo CD applications

• Develop and maintain Argo Workflows

• Build and troubleshoot CI/CD pipelines

• Configure secure application access to Azure Key Vault

• Manage container images through ACR

• Troubleshoot Kubernetes pods, deployments, ingress, and networking

• Implement security scanning within CI/CD pipelines

• Configure monitoring, logging, and alerting

• Support production deployments and rollback activities

• Troubleshoot infrastructure and application deployment issues independently

• Automate repetitive operational activities using Terraform, Bash, Python, or pipeline automation

📌 DevSecOps Engineer (Maharashtra)
🏢 RapidBrains
📍 Maharashtra