DevSecOps Practice Lead
Posted Updated
Summary
Senior DevSecOps subject-matter expert in Noida who defines and governs DevSecOps standards, designs end-to-end CI/CD solutions with embedded security scanning, and coaches platform engineers. Core stack: Azure/Azure DevOps, Bash/PowerShell, Git, SonarQube, JFrog Artifactory, and SAST/DAST/IAST/SCA tooling.
Roles and Responsibilities:
Senior DevSecOps SME who will be a part of the DevSecOps Practice team Define, evolve and maintain DevSecOps standards, practices and process. Work with DevSecOps Practice, Platforms & Value Streams to continuously improve overall DevSecOps maturity.
Engage with business teams & stakeholders to articulate DevSecOps opportunities and value.
Engage with the platform owners and teams (Strategic Core, Data, Integration, Digital etc.) to plan and adopt DevSecOps practices.
Ability to appreciate complexities and dependencies across all platforms to decide on DevSecOps standards and exception.
DevSecOps Solution design assessment based on technology.
Ability to work with Architecture Review Boards, Cyber Security to secure approvals on tool choices, solution etc Experience with multiple DevSecOps tooling & technology to build a PoV on modernising and simplifying the DevOps processes Identify scope, Analyse, Design and Develop end to end DevSecOps or CICD solution for platform applications.
Coach and train platform engineers on DevSecOps methodology and solution for effective use of capabilities and to enable cross-functional autonomous team culture.
Provide guidance and consultancy for issue resolution with DevSecOps pipelines.
DevSecOps governance and reporting across Platforms & Value Streams.
Technical Skills: Cloud Platform and Services experience
– Azure/Hybrid Cloud/SaaS Experience and proficiency with any CICD tooling
- Azure DevOps etc. Scripting experience – Bash and PowerShell, YAML/JSON Experience with any git-based version control system
- Bitbucket, Azure Git Repos Experience with any Project management or collaboration tooling
– Jira, Confluence Experience with any Code Quality tooling
- SonarQube Experience with any Artifact Management tooling
- Jfrog Artifactory Experience in end-to-end CI/CD pipeline development and integration with DevOps tooling Experience with Application Security scanning - SAST, DAST, IAST, SCA Experience
Senior DevSecOps SME who will be a part of the DevSecOps Practice team Define, evolve and maintain DevSecOps standards, practices and process. Work with DevSecOps Practice, Platforms & Value Streams to continuously improve overall DevSecOps maturity.
Engage with business teams & stakeholders to articulate DevSecOps opportunities and value.
Engage with the platform owners and teams (Strategic Core, Data, Integration, Digital etc.) to plan and adopt DevSecOps practices.
Ability to appreciate complexities and dependencies across all platforms to decide on DevSecOps standards and exception.
DevSecOps Solution design assessment based on technology.
Ability to work with Architecture Review Boards, Cyber Security to secure approvals on tool choices, solution etc Experience with multiple DevSecOps tooling & technology to build a PoV on modernising and simplifying the DevOps processes Identify scope, Analyse, Design and Develop end to end DevSecOps or CICD solution for platform applications.
Coach and train platform engineers on DevSecOps methodology and solution for effective use of capabilities and to enable cross-functional autonomous team culture.
Provide guidance and consultancy for issue resolution with DevSecOps pipelines.
DevSecOps governance and reporting across Platforms & Value Streams.
Technical Skills: Cloud Platform and Services experience
– Azure/Hybrid Cloud/SaaS Experience and proficiency with any CICD tooling
- Azure DevOps etc. Scripting experience – Bash and PowerShell, YAML/JSON Experience with any git-based version control system
- Bitbucket, Azure Git Repos Experience with any Project management or collaboration tooling
– Jira, Confluence Experience with any Code Quality tooling
- SonarQube Experience with any Artifact Management tooling
- Jfrog Artifactory Experience in end-to-end CI/CD pipeline development and integration with DevOps tooling Experience with Application Security scanning - SAST, DAST, IAST, SCA Experience