Lead DevSecops Engineer

Overview

Lead DevSecOps Engineer who combines software development and IT operations practices to shorten the systems delivery life cycle, building and maintaining the tooling and infrastructure that automates release, deployment and upgrade processes.

What you'll do

• Architect and implement automated build, test and deployment workflows using tools such as Harness.io and GitHub Actions, and continuously improve pipeline reliability, speed and maintainability through templating, modularization and best practices.
• Develop and maintain infrastructure-as-code pipelines using Terraform, ensuring consistent provisioning and configuration of cloud resources (compute, networking, storage, IAM).
• Operate and optimize components in AWS or Google Cloud Platform, and monitor cost, performance and security posture, recommending and implementing improvements.
• Work with application teams to onboard services onto CI/CD pipelines, define branching strategies and automate release gates.
• Partner with security and compliance teams to bake policies such as vulnerability scans and secret management into pipelines.
• Build reusable pipeline templates and shared libraries to accelerate delivery across teams.
• Integrate testing frameworks (unit, integration, security) and observability tools (logging, metrics, tracing) into workflows.
• Diagnose and resolve pipeline failures, infrastructure provisioning errors and environment drift.
• Monitor and triage security vulnerabilities identified by platforms such as Wiz and Macroscope, and partner with engineering and security stakeholders to drive remediation.
• Collaborate with security teams to integrate automated vulnerability detection and reporting into CI/CD pipelines.
• Configure and maintain secure and reliable log forwarding from application and infrastructure layers to observability platforms such as Splunk.
• Help other developers with technical issues and onboard them to the frameworks.
• Partner with development and other project teams to improve the systems process and provide support with day-to-day operations.
• Migrate older technology implementations to a modern container/Kubernetes platform.
• Ensure logs meet compliance, audit and monitoring requirements, and help define and enforce logging standards across environments.
• Lead primary contributions in development, testing frameworks and rollout, working under the guidance of Lead Software Engineers, Tech Leads and Architects.
• Research trends in the technology domain, discover new tools and build consensus for internal adoption.
• Mentor and train junior and mid-level engineers, assisting with technical issues and onboarding them to the frameworks.

What you'll need

• Bachelor's degree or equivalent experience in a technical discipline.
• Typically a minimum of 6 years of experience in IT with expertise in complex technology solutions.
• Wide-ranging experience, using professional concepts and company objectives to resolve complex issues in creative and effective ways.
• Works on complex issues requiring in-depth evaluation of variable factors, exercising judgment in selecting methods, techniques and evaluation criteria.
• Networks with key contacts outside own area of expertise.
• Determines methods and procedures on new assignments and may coordinate activities of other personnel (Team Lead).

Nice to have

• Familiarity with container orchestration (Docker, Kubernetes).
• Experience with policy-as-code tools (OPA, policy frameworks).
• Exposure to security automation (vulnerability scanning, secrets management).
• Understanding of Git branching strategies (GitFlow, trunk-based development).
• GCP/Azure cloud certification.
• SAFe certification.
• Experience working with remote teams (onshore, nearshore, offshore).
• Experience managing a large code base mixing legacy and modern technology, preferably moving legacy code to the cloud.
• Experience with SF DX.
• Experience with continuous integration build engines such as Jenkins.

Details

• Location: Pune, India.