Chief Manager - DevSecOps (Bangalore, Hebbal)

Job Purpose :

We are looking for a highly experienced DevSecOps leader to drive the organization's DevSecOps transformation, platform engineering, and cloud-native security initiatives. This role will be responsible for architecting, implementing, and governing secure, scalable, and automated DevSecOps pipelines and practices across the Software Development Lifecycle (SDLC). Candidate should have deep expertise in modern deployment strategies (Blue-Green, Canary), observability platforms (Grafana, ELK), Infrastructure as Code (IaC) automation, cloud security, CI/CD pipelines, and enterprise-scale DevSecOps practices.

Key Responsibilities :

Design and Architecture: Lead the design and implementation of a scalable, secure, and automated DevSecOps framework and strategy. Ensure security practices are integrated throughout the SDLC, from development to production.

CI/CD & Deployment Engineering: Architect, develop, and optimize CI/CD pipelines with integrated security controls. Implement and govern advanced deployment strategies including:

• Blue-Green Deployments
• Canary Deployments
• Rolling Deployments
• Feature Flag-Based Releases

Security Automation: Advocate for and implement automated security testing tools (SAST, DAST, IAST) and integrate them into CI/CD workflows to proactively identify and resolve vulnerabilities.

Infrastructure as Code (IaC) & Automation Design and implement secure infrastructure-as-code practices using tools like Terraform, CloudFormation, and Ansible. Ensure cloud-native environments (OCI, AWS, Azure, GCP) follow security best practices.

Cloud Security Architecture: Design security solutions for cloud environments, ensuring secure cloud deployments and appropriate access control, encryption, and auditing.

Observability & Reliability Engineering: Establish and enhance observability frameworks using Grafana, ELK, Prometheus, and Open Telemetry to enable proactive monitoring, logging, and alerting. Drive reliability initiatives through incident analysis, performance optimization, and management of SLIs, SLOs, and SLAs.

Risk and Threat Modeling: Lead risk assess and threat modelling exercises to identify potential risks in applications, systems, and infrastructure, ensuring effective mitigation strategies are in place.

Collaboration and Guidance: Collaborate closely with cross-functional teams, including developers, security professionals, and operations staff, to ensure that security is a shared responsibility.

Incident Management: Work with the incident response team to develop and implement processes for rapid identification, containment, and remediation of security incidents.

Governance and Compliance: Ensure that security and compliance requirements (e.g., GDPR, HIPAA, SOC 2) are met through the development and enforcement of secure coding standards, controls, and audit procedures.

Mentorship and Leadership: Provide mentorship and guidance to development and operations teams on secure coding, threat modeling, and security best practices. Promote a security-first culture across the organization.

Documentation and Reporting: Document security architecture, designs, and processes. Provide regular updates and reports to senior management on the state of security posture and risk management.

Qualifications: B.E/B. Tech/M. Tech/MBA/MCA/PG Diploma.

Experience :

• At least 10+ years of experience in DevOps, SecOps, or related security-focused roles, with a proven track record of designing and architecting secure systems in a cloud-native environment.
• DevSecOps Expertise: Extensive experience with DevSecOps principles, security tools, and practices integrated into CI/CD pipelines (e.g., Jenkins, GitLab, CircleCI).
• Cloud Security: Deep understanding of cloud security frameworks and services across AWS, Azure, or Google Cloud platforms.
• Infrastructure as Code (IaC): Expertise in infrastructure-as-code tools (Terraform, CloudFormation, Ansible) and how they integrate with secure deployment practices.
• Good experience in Deployment strategies (Ex: Blue-Green, Canary), Observability (Ex: Grafana, ELK), IaC automation.
• Security Tools: Experience with security tools for static analysis (SAST), dynamic analysis (DAST), interactive testing (IAST), and security monitoring. Familiarity with container security (Docker, Kubernetes).

Please share your profile at pallavi.singh@tvscredit.com. (Do not change the subject line while sharing your profile)