Security Engineer
DevSecOps Engineer responsible for designing and maintaining secure, automated CI/CD pipelines and cloud infrastructure on AWS, using Terraform, Docker, and Kubernetes, while embedding security controls and automation throughout the software development lifecycle.
Job Description – DevSecOps Engineer
Project Description
The DevSecOps Engineer will join a cross-functional technology team responsible for building, securing, and operating modern cloud-native platforms. The project focuses on implementing secure CI/CD pipelines, embedding security controls throughout the Software Development Life Cycle (SDLC), and automating infrastructure and application delivery in AWS-based environments. Security, scalability, and reliability are core pillars of this initiative.
Role Description
As a DevSecOps Engineer, you will be responsible for designing, implementing, and maintaining secure, automated CI/CD pipelines and cloud infrastructure. You will work closely with development, QA, security, and operations teams to ensure security is integrated by design, not as an afterthought. This role requires strong hands-on experience with automation, cloud services, security tooling, and infrastructure as code.
Key Responsibilities / Task Descriptions
Design, implement, and maintain secure CI/CD pipelines for application build, test, and deployment.
Integrate security scanning, compliance checks, and vulnerability management into development and deployment workflows (DevSecOps practices).
Automate infrastructure provisioning, configuration, and application deployment using Infrastructure as Code (IaC) and configuration management tools.
Collaborate with development, QA, security, and operations teams to ensure security best practices are embedded throughout the SDLC.
Support, enhance, and secure containerized and orchestrated environments.
Implement and enforce cloud security best practices, including IAM least-privilege access, secrets management, and secure networking.
Monitor, troubleshoot, and optimize CI/CD pipelines and cloud infrastructure.
Contribute to continuous improvement of automation, security controls, and operational processes.
Candidate Must-Have Skills & Requirements
CI/CD, Version Control & Security Integration
Strong experience building and maintaining enterprise-grade CI/CD pipelines.
Hands-on experience with GitHub , including branching strategies, pull request workflows, and repository management.
Experience with GitHub Actions , including secure workflows, secrets management, and runner configuration.
Experience with Jenkins (scripted and declarative pipelines, shared libraries).
Experience integrating SonarQube for code quality and SAST.
Experience with Fortify or similar static code analysis and security scanning tools.
Experience setting up and managing artifact repositories such as Nexus , JFrog Artifactory , or Amazon ECR .
Configuration Management & Automation
Strong experience with Ansible (roles, playbooks, secure inventory handling)
Posted June 24, 2026