Senior DevSecOps Engineer

Location : Chennai / Bangalore.

Np- 15 to 30 days Maximum/ Immediate Joiners Preferred.

Skillset Required
• Candidate with 8-10 Years of overall experience
• Bachelor of Technology / B.E or equivalent field, OR a combination of relevant education and experience
• Must have Certified Kubernetes Application Developer (CKAD) certification or CKA.
• Strong knowledge of DevOps principles, practices, and tools (on end-to-end application life cycle).
• Knowledge of software security concepts, principles, and best practices.
• Experience with SAST and DAST tools such as SonarQube, Checkmarx, and OWASP ZAP.
• Experience with automation tools such as Jenkins, GitLab CI/CD, or CircleCI.
• Expert level in DevSecOps tools and processes to include, but not limited to Git, JFrog Artifactory, Jenkins, Nexus, Kubernetes, and HashiCorp Products.
• Experience with cloud infrastructure and containerization technologies such as AWS, Azure, Docker, and Kubernetes.
• Proficient in creating Ansible, Helm and other automation and configuration tools.
• Proficient in developing scripts, preferably using Python / Java / NodeJS.
• Experience with observability products
• Strong problem-solving and analytical skills.
• Excellent communication and collaboration skills.
• Ability to work independently and as part of a team.

Key Responsibilities
• Design, implement, and maintain secure and reliable software delivery pipelines for applications hosted in Kubernetes.
• Develop and maintain security controls, policies, procedures, and tools for Kubernetes.
• Integrate security into the software development lifecycle using various SAST and DAST tools such as SonarQube, Checkmarx, and OWASP ZAP.
• Set up various SAST and DAST tools in VM / Kubernetes environment and maintain the same.
• Automate security testing, vulnerability scanning, and compliance checks using tools such as Jenkins, GitLab CI/CD, CircleCI, or Azure DevOps.
• Collaborate with developers, operations teams, and security professionals to ensure that security is embedded at every stage of the development process.
• Troubleshoot and resolve security issues related to Kubernetes and VM.
• Ensure compliance with regulatory and industry standards such as PCI-DSS, HIPAA, and GDPR.
• Continuously monitor and improve the security of the software delivery pipelines using tools such as Prometheus, Grafana, or ELK