DevSecOps Engineer

Responsibilities

• Integrate security into CI/CD pipelines across multi-cloud environments
• Design, develop, and maintain Infrastructure as Code (IaC) using Terraform and CloudFormation
• Implement Policy as Code and governance controls across AWS, Azure, and OCI
• Write and manage cloud security policies including IAM, RBAC, and OCI Compartments
• Develop and maintain serverless functions such as AWS Lambda, Azure Functions, and OCI Functions
• Automate security controls, compliance checks, and remediation workflows
• Integrate security tools (SAST, DAST, SCA, container and IaC scanning) into pipelines
• Monitor cloud environments for security risks and vulnerabilities
• Collaborate with DevOps, Cloud, and Security teams to design secure architectures

Requirements

• Strong hands-on experience with Terraform (multi-cloud)
• Experience with AWS CloudFormation or Azure ARM/Bicep
• Proven experience writing cloud security policies and governance controls
• Experience with Policy as Code (OPA, Sentinel, Azure Policy, AWS Config, or OCI Security Zones)
• Hands-on development of serverless functions using Python or Node.js
• Solid understanding of cloud security principles across AWS, Azure, and OCI
• Knowledge of CI/CD tools (Jenkins, GitHub Actions, GitLab CI, or Azure DevOps)
• Experience with containers and orchestration (Docker, Kubernetes)
• Strong scripting skills in Python or Bash
• Knowledge of OWASP Top 10 and secure coding practices

Preferred Qualifications

• Experience with cloud governance frameworks and landing zones
• Familiarity with AWS Control Tower, Azure Landing Zones, or OCI Landing Zone
• Experience with compliance standards (ISO 27001, SOC 2, PCI-DSS)
• Cloud and security certifications (AWS, Azure, OCI, Kubernetes, CKS)