Azure DevSecOps Engineer
Posted Updated
Description
Key Skills: Azure, Docker, Azure Devops, Terraform, Kubernetes, OWASP, GitHub Actions (SAST & OSS integration), Sonarqube, Jenkins, Azure Key Vault, DevOps, Application Security Testing
Roles and Responsibilities:
- Design, implement and maintain CI/CD pipelines using Azure DevOps for application and infrastructure delivery.
- Build and manage secure Azure environments using Terraform and infrastructure-as-code practices.
- Integrate security testing into delivery pipelines, including SAST, DAST, software composition analysis and infrastructure scanning.
- Implement shift-left security controls across source code, container images, infrastructure and release workflows.
- Assess vulnerabilities, coordinate remediation with engineering teams and improve security controls across the DevSecOps lifecycle.
Skills Required:
- 7-9 years of experience in DevOps, cloud engineering, DevSecOps or related technology roles.
- Strong hands-on experience with Microsoft Azure cloud services and Azure DevOps.
- Practical expertise in Terraform for provisioning, configuration and secure infrastructure management.
- Experience building CI/CD pipelines and automating application and infrastructure delivery.
- Working knowledge of Docker, container security and secure SDLC practices.
Good to Have:
- Experience with Kubernetes, Azure Key Vault, Jenkins, GitHub Actions, SonarQube, Snyk, Trivy, OWASP ZAP, Checkmarx, Veracode or HashiCorp Vault.
Education: B.E. or B.Tech degree in Computer Science, Information Technology or a related discipline.