Key Responsibilities
- Design and implement DevSecOps pipelines that integrate security checks throughout the CI / CD process.
- Automate build, deployment, and infrastructure provisioning using tools like Jenkins , GitHub Actions , Terraform , or AWS CodePipeline .
- Embed security controls into application development and deployment processes (SAST, DAST, dependency scanning, container security).
- Manage and monitor AWS infrastructure for high availability, security, and cost optimization.
- Implement Infrastructure as Code (IaC) for consistent and repeatable environment provisioning.
- Work closely with developers to promote secure coding practices and vulnerability remediation .
- Deploy and manage containerized workloads using Docker, ECS, or Kubernetes.
- Enforce IAM , network security , and encryption standards in line with company policies.
- Respond to security incidents and participate in root cause analysis and continuous improvement.
- Maintain documentation for pipelines, configurations, and security standards.
Required Skills and Experience
7+ years of experience in DevOps, Cloud Engineering, or Security Engineering.Strong expertise in AWS (EC2, EKS / ECS, Lambda, RDS, S3, CloudFormation, CloudWatch, Inspector).Proficiency with CI / CD tools – Jenkins, GitLab CI, GitHub Actions, or Azure DevOps.Hands-on experience with Infrastructure as Code (IaC) – Terraform, Ansible, or AWS CDK.Knowledge of DevSecOps tools :Static code analysis (SonarQube, Checkmarx)Dependency and container scanning (Trivy, Snyk, Twistlock)Secrets management (HashiCorp Vault, AWS Secrets Manager)Experience implementing security policies , monitoring , and incident response .Familiarity with .NET Core , Angular , and PostgreSQL environments preferred.Strong understanding of network security, IAM, and compliance frameworks (SOC2, ISO 27001, NIST)