Job Summary

We are looking for an experienced DevSecOps Engineer with robust hands-on experience in CICD automation, security integration, container orchestration, cloud infrastructure, Azure DevOps administration, and enterprise release management.

The ideal candidate should have practical experience implementing secure CICD pipelines, integrating security scanning tools, managing containerized applications, administering Azure DevOps repositories and boards, and automating deployments across multiple environments.

Location: Hyderabad

Experience: 5-8 Years

Shift Timings: Rotational Shifts

Work Mode: Work from Office (as applicable)

Key Responsibilities

1. CICD Pipeline Automation
- Design, develop, and maintain CICD pipelines using Jenkins and Azure DevOps.
- Develop and maintain Jenkinsfiles, pipeline templates, and reusable automation scripts.
- Integrate Git repositories, pull requests, branch policies, and automated build processes.
- Automate application build, packaging, deployment, and release workflows.
- Implement quality gates, automated testing, and pipeline failure handling.
- Troubleshoot pipeline failures and improve build and deployment reliability.

- Azure DevOps Administration & Repository Management

- Manage Azure DevOps services, including Azure Boards, Azure Repos, and Azure Pipelines.
- Create and manage Azure Boards, projects, work items, user stories, tasks, bugs, and sprint workflows.
- Configure and maintain repository permissions,



user access, security groups, and project-level access controls.
- Implement and manage branch policies, pull request approvals, reviewers, build validations, and merge restrictions.
- Manage repository access, branching strategies, and source code governance.
- Configure and troubleshoot Azure DevOps permissions, including project, repository, pipeline, and service connection permissions.
- Maintain secure access management and ensure compliance with organizational development and release policies.

- DevSecOps & Security Integration

- Integrate security tools such as Mend and SonarQube into CICD pipelines.
- Implement and manage SAST, SCA, and DAST security scanning.
- Identify, analyze, track, and remediate vulnerabilities in application code, open-source dependencies, and container images.
- Configure security gates to prevent vulnerable code and dependencies from progressing through deployment pipelines.
- Manage vulnerability reports, false-positive analysis, SBOM generation, and security compliance.
- Implement secure secrets management and pipeline access controls.

- Containerization & Orchestration

- Hands-on experience with Docker and container image management.

Key Skills

- CICD automation
- Security integration
- Containerization
- Orchestration
- Cloud infrastructure
- Azure DevOps administration
- Enterprise release management
- Mend
- SonarQube

📌 Devsecops Engineer - 4-8Yrs - Hyderabad
🏢 Pragma Edge Software Services
📍 Hyderabad