Posted on: 13-10-2026

Experience: 4+ years

India-Bengaluru

Job ID #1002282

Role Requirements

- Skills: YAML, GitHub Actions, Azure DevOps Pipelines, CI/CD, Git, Docker, Kubernetes, Azure Kubernetes Service (AKS), Microsoft Azure, AWS, Infrastructure as Code, Terraform, Bicep, ARM, SAST, DAST, SCA, Container Scanning, IAM/RBAC, Azure Key Vault, AWS Secrets Manager, HashiCorp Vault, JIRA, Confluence, IIS, Grafana, Prometheus, Azure Monitor, Loki, Python, PowerShell, Bash, DNS, TCP/IP, Load Balancers, Reverse Proxies, TLS/SSL, Incident Management, AI-Assisted Automation
- Author and maintain YAML-based pipelines in GitHub Actions and Azure DevOps Pipelines, including reusable templates, approval gates, and environment-specific variable/secret handling.
- Implement pipeline security controls, including branch protection, signed commits, dependency/SCA scanning, and artifact signing.
- Own release orchestration across development, QA, staging, and production, including rollback strategy and change-management alignment with JIRA-linked deployments.
- Provision and manage Azure services, including AKS, App Services, networking, storage, and IAM/RBAC, using Infrastructure as Code, with working exposure to AWS for multi-cloud or disaster recovery scenarios.
- Build, scan, and deploy Docker images; manage Kubernetes workloads on AKS, including deployments, services, ingress, namespaces, and autoscaling.
- Administer supporting Windows infrastructure where applicable, including IIS site/application pool configuration, bindings, and certificate management.
- Integrate security tooling into pipelines and runtime, including SAST/DAST/SCA, container image scanning, secrets management, and vulnerability remediation tracking.
- Apply cloud security guardrails, including NSGs/firewalls, secrets management, least-privilege IAM,



and policy-as-code across Azure and AWS resources.
- Support audit and compliance activities through evidence gathering, access reviews, and documentation in Confluence.
- Build and maintain Grafana dashboards and alerts for application, infrastructure, and pipeline health.
- Lead first-line troubleshooting for production incidents, including host availability checks and network-path tracing for external endpoints using DNS resolution, ping/traceroute, port-level checks, and proxy/firewall-hop analysis.
- Restore service or connectivity when a host is unreachable on standard web ports by coordinating firewall/NSG rule fixes, web server restarts, certificate/TLS checks, and DNS validation.
- Validate downstream functionality after fixes and update monitoring/alerting to detect recurring failure modes proactively.
- Drive post-incident follow-through through root-cause notes, JIRA updates, and monitoring/alert improvements.
- Apply AI tools to daily engineering work, including AI coding assistants, log/anomaly summarization, and pipeline log triage.
- Design and maintain AI-assisted JIRA ticket workflows to analyze tickets, generate recommended next steps/subtasks, and update tickets as situations evolve using APIs, LLM-based automation, and webhooks.
- Evaluate AI-driven pipeline capabilities, including AI-assisted code/security review gates, auto-generated runbooks,



and AI-suggested remediation for recurring alerts.
- Track and manage work in JIRA, including incidents, changes, and automation-generated tasks.
- Maintain runbooks, architecture notes, and SOPs in Confluence.
- Write Python automation for pipeline utilities, monitoring integrations, JIRA/Confluence API automation, and diagnostics.
- Have experience with Azure DevOps Pipelines, GitHub Actions, Docker, AKS, Azure service provisioning, and AWS exposure.
- Implement and manage SAST, DAST, SCA, secrets management, cloud security posture management, and vulnerability remediation.
- Configure, administer, troubleshoot, and maintain IIS and Windows-hosted web applications and services.
- Monitor infrastructure, application performance, logging, and alerting through Grafana and associated metrics/logging backends.
- Have working knowledge of Terraform and/or Bicep/ARM, secrets management, container scanning tools such as SonarQube, Snyk, Trivy, Checkmarx, or Aqua.
- Demonstrate solid networking fundamentals, Linux and Windows Server administration, certificate/PKI management, and ITIL-aligned incident response.
- Use Python, PowerShell, and Bash for automation, operational tasks, and incident diagnostics.
- Ansible or similar configuration management tools are nice to have.
- Have working knowledge of CIS Benchmarks, ISO 27001, SOC 2, and cloud/pipeline security controls.
- Apply governance and guardrails for AI-generated JIRA updates, including human review, audit trails, and rollback mechanisms.
- Demonstrate strong documentation, incident reporting, runbook maintenance, and stakeholder communication skills.
- AZ-400, CKA, AWS Certified DevOps Engineer, AWS Security Specialty, Security+, or equivalent certifications are preferred.

📌 DevSecOps Engineer (Bengaluru)
🏢 Kalpita Technologies
📍 Bengaluru