Senior DevSecOps Engineer

Job Description (DevSecOps with AWS & Kubernetes Expertise)

Profile Designation: (DevSecOps)

Department: IT

Job Location: Thane

Job Type: Permanent

Work Mode: In Office

Key Responsibilities

• Design, implement, and manage secure AWS cloud infrastructure.
• Build and maintain CI/CD pipelines for application deployment and infrastructure automation.
• Manage containerized workloads using Docker and Kubernetes/EKS.
• Deploy and manage applications using Helm charts and configure Ingress controllers.
• Configure and manage Nginx and Apache HTTPD web servers for reverse proxy, load balancing, and hosting.
• Implement DevSecOps practices including SAST, DAST, vulnerability management, and compliance checks.
• Automate infrastructure provisioning using Infrastructure as Code (IaC) tools.
• Configure and manage monitoring, logging, and alerting solutions.
• Work closely with development, security, and infrastructure teams for secure release management.
• Implement IAM policies, role-based access controls, and cloud security best practices.
• Manage SSL certificates, secrets, and key management solutions.
• Troubleshoot production issues, deployment failures, and infrastructure bottlenecks.
• Support audit, compliance, and governance requirements.
• Optimize AWS infrastructure for performance, availability, and cost efficiency.
• Create technical documentation, SOPs, and architecture diagrams.

Required Skills & ExperienceAWS Services (Hands-on experience with):

• EC2, VPC, IAM, S3, RDS
• Route 53, CloudFront, CloudWatch, AWS Config
• AWS WAF, AWS Shield
• Application Load Balancer / Network Load Balancer
• Auto Scaling
• EKS / ECS, Lambda, API Gateway
• AWS MSK (Managed Streaming for Apache Kafka),RDS,Elasticache etc.
• Systems Manager, Secrets Manager, CloudTrail
• AWS Organizations / Control Tower

DevOps & CI/CD:

• Jenkins, GitLab CI/CD, GitHub Actions
• Atlassian Jira
• AWS CodePipeline, AWS CodeBuild
• Git version control

Containerization & Orchestration:

• Docker, Kubernetes, Helm Charts, Amazon EKS
• Container security best practices

Infrastructure as Code (IaC):

• Terraform, CloudFormation, Ansible

Security & DevSecOps:

• SAST and DAST tools
• Vulnerability Assessment & Remediation
• Dependency Scanning
• Container Security Scanning
• IAM hardening
• Security monitoring and incident response
• SIEM integration
• Compliance standards and audit handling

Preferred Security Tools:

• SonarQube, Trivy, OWASP ZAP, Snyk
• Prisma Cloud / Wiz / Aqua Security

Monitoring & Logging:

• ELK Stack, Prometheus, Grafana
• CloudWatch Logs
• Alerting and dashboard creation

Required Qualifications:

• Any Technical Graduate/Post Graduate (B.Tech/B.E/ BCA or MCA, B. Sc (IT), B.Sc (CS))
• 4 to 6 years of hands-on experience in AWS Cloud and DevSecOps.
• Strong Linux administration and shell scripting knowledge.
• Good understanding of networking, DNS, SSL/TLS, and firewalls.
• Experience working in Agile/Scrum environments.
• Strong troubleshooting and communication skills.