Senior DevSecOps Administrator

We are seeking a highly skilled Senior DevSecOps Administrator to strengthen the security of our cloud infrastructure, applications, and software delivery pipelines. The candidate should have hands-on experience with Azure and AWS security, CI/CD pipeline security, Infrastructure as Code (IaC), container security, and application security testing. This role is responsible for integrating security throughout the software development lifecycle, ensuring secure, scalable, and compliant technology solutions while supporting vulnerability management, cloud governance, automation, and regulatory compliance initiatives.

Roles & Responsibilities

• Design, implement, and maintain secure CI/CD pipelines using Azure DevOps, GitHub Actions, Jenkins, and other DevOps tools.
• Administer and secure Azure and AWS cloud environments, including identity management, access controls, networking, and data protection services.
• Integrate and manage application security testing tools such as SAST, DAST, SCA, and secrets scanning within the software development lifecycle.
• Conduct Vulnerability Assessments and Penetration Testing (VAPT), validate findings, and work with stakeholders to ensure timely remediation.
• Develop, deploy, and maintain Infrastructure as Code (IaC) solutions using Terraform, ARM/Bicep, and CloudFormation.
• Secure and manage containerized and Kubernetes environments, including Docker, AKS, and EKS platforms.
• Monitor cloud security posture using tools such as Microsoft Defender for Cloud, AWS Security Hub, GuardDuty, and Azure Policy.
• Implement and maintain security controls, compliance standards, and governance processes across cloud and application environments.
• Automate administrative and security tasks using PowerShell, Python, and Bash scripting.
• Participate in security architecture reviews, threat modeling, and risk assessments to identify and mitigate security risks.
• Support compliance, audit, and regulatory requirements by maintaining security documentation, reports, and operational procedures.
• Provide operational support, troubleshoot security-related incidents, and collaborate with development, infrastructure, and cybersecurity teams to drive continuous improvement initiatives.

Requirements

• Bachelor s or master s degree in computer science, Information Technology, Engineering, Cybersecurity, or a related discipline.
• 4-6 years of hands-on experience in DevSecOps, Cloud Security, Application Security Testing, Vulnerability Management, and Software Quality Assurance.
• Strong expertise in Azure and AWS security services, identity and access management, cloud governance, and security monitoring.
• Experience designing and securing CI/CD pipelines using Azure DevOps, GitHub Actions, Jenkins, or similar DevOps platforms.
• Proficiency with Infrastructure as Code (IaC) technologies, including Terraform, ARM/Bicep, and AWS CloudFormation.
• Hands-on experience with Docker, Kubernetes, AKS, EKS, and container security best practices.
• Experience with security testing tools and methodologies, including SAST, DAST, SCA, secrets scanning, and VAPT.
• Strong understanding of OWASP Top 10, OWASP API Security, secure coding practices, and application security controls.
• Proficiency in PowerShell, Python, and Bash scripting for automation and operational efficiency.
• Familiarity with SIEM/SOAR platforms, security monitoring, incident response, and threat detection processes.
• Knowledge of security frameworks and standards such as ISO 27001, PCI-DSS, NIST, CIS Benchmarks, RBI IT Framework, DPDP Act, and CERT-In guidelines.
• Strong troubleshooting, analytical, and problem-solving skills.
• Excellent verbal and written communication skills with the ability to collaborate across technical and business teams.
• Customer-focused mindset with a commitment to security and operational excellence.
• Flexibility to work in shifts and support multiple locations based on business requirements.

Certifications (At least one mandatory)

AZ-500 | AWS Security Specialty | CDP | CKS | CEH | OSCP | eWPT | ISTQB CTFL