Role & responsibilities
We are seeking a skilled DevSecOps Engineer with hands-on experience in CI/CD, containerization, Kubernetes, and application security. The ideal candidate will integrate security practices across the SDLC, automate infrastructure and pipelines, and ensure secure, scalable deployments.
Key Responsibilities
Design, implement, and maintain CI/CD pipelines using GitLab CI
Integrate security scans into pipelines:
SAST (SonarQube)
SCA (JFrog Xray / Dependency scanning)
DAST (OWASP ZAP / equivalent tools)
Manage artifact repositories using JFrog Artifactory
Automate infrastructure and configuration using Ansible
Build and optimize Docker images following security best practices
Deploy and manage workloads on Kubernetes clusters
Implement container security and image scanning policies
Enforce branching strategies, MR approvals, and pipeline security
Monitor pipeline performance and reduce build/scan time
Collaborate with development and security teams to remediate vulnerabilities
Ensure compliance with organizational and regulatory security standards
Troubleshoot CI/CD, container, and deployment issues
Required Skills
CI/CD & SCM
Strong experience with GitLab CI/CD
Git workflows, protected branches, merge request policies
Security (DevSecOps Core)
SAST SonarQube (quality gates, vulnerability management)
SCA – JFrog Xray / dependency scanning
DAST – OWASP ZAP or similar tools
Understanding of OWASP Top 10
Containers & Orchestration
Docker – image creation, optimization, vulnerability scanning
Kubernetes – deployments, services, config maps, secrets, RBAC
Automation & IaC
Ansible – playbooks, roles, configuration automation
Shell scripting (Bash)
Artifact & Build Tools
JFrog Artifactory
Maven / Gradle / npm (basic understanding)
Good to Have
Experience with Helm
Exposure to Vault / Secrets Management
Cloud platforms (AWS / Azure / GCP)
Monitoring tools (Prometheus, ELK
Qualifications
Bachelor’s degree in Computer Science / Engineering or equivalent
5+ years of experience in DevOps / DevSecOps / Platform Engineering
Soft Skills
Strong problem-solving and debugging skills
Good communication and collaboration abilities
Security-first mindset
Ability to work in rapid-paced environments
📌 Devops Engineer (Bengaluru)
🏢 EY
📍 Bengaluru