Experience: 7–10 Years

Location: Bangalore — Bangalore candidates preferred

CTC: ₹13–15 LPA

Interview: Saturday

L1: Face-to-Face in Bangalore

Shift: Up to 10 PM US shift; otherwise normal shift

Role Type: Senior Individual Contributor

Role Overview

We are looking for a Senior DevSecOps Engineer to design, build, and operate the cryptographic and infrastructure foundation for an Agentic Authentication Platform.

The role has three core technology areas:

AWS CloudHSM + Terraform/Terragrunt + JFrog Artifactory The engineer will also work across AWS, EKS/Kubernetes, Helm, GitOps, CI/CD, cloud networking, Zero Trust, and security-focused platform engineering .

Key Responsibilities

AWS CloudHSM

- Design and deploy CloudHSM clusters.
- Perform key ceremonies and key rotation.
- Manage high-availability operations.
- Integrate CloudHSM with downstream authentication and signing services.

Terraform / Terragrunt

- Design multi-environment infrastructure across Dev, QA, Stage, and Production .
- Build reusable/DRY Terraform modules.
- Manage remote-state governance.
- Implement Policy-as-Code using OPA/Sentinel in CI.

JFrog Artifactory

- Manage enterprise artifact governance.
- Manage signed container images and Helm charts.
- Implement SBOM generation and scanning gates.




- Integrate artifact promotion with GitOps workflows.

EKS / Kubernetes

- Manage production AWS EKS environments.
- Work with Helm charts and CRDs.
- Support service mesh implementations.
- Implement ingress/egress controls and Zero Trust principles.

Security & Observability

- Build observability for delegation chains and audit trails.
- Ensure auditability of who acted on whose behalf, with what scope, and when .
- Work with IAM, KMS, networking, DNS, firewalls, routing, and AWS security services.
- Support GitOps and CI/CD pipelines.

Mandatory Skills

AWS CloudHSM – hands-on production experience

Terraform + Terragrunt

JFrog Artifactory

7+ years in DevSecOps / Platform Engineering / SRE with security focus

Strong AWS – VPC, IAM, KMS, EKS, Route 53, security services

Production Kubernetes / EKS

Helm & CRDs

Cloud networking – DNS, firewalls, routing

GitOps & CI/CD

Zero Trust principles

Preferred Skills

- Cryptographic delegation flows - OAuth 2.0 token exchange, workload identity federation.
- Familiarity with agentic security patterns (scoped-capability tokens).
- Policy-as-Code (OPA / Sentinel).
- AWS Skilled / Specialty certs; Kubernetes certs (CKA, CKAD, CKS).

📌 Senior DevSecOps Engineer – AWS CloudHSM | Terraform | JFrog (India)
🏢 Asian Hires
📍 India