Application Development & Support Specialist

• *Job Description – DevSecOps Engineer**

• *Job Title**

• *DevSecOps Engineer**

• *Location**

Pune, Work from Office

• *Position Summary**

We are seeking a highly skilled **DevSecOps Engineer** to drive the integration of security, automation, and operational excellence across the software development lifecycle. The ideal candidate will be responsible for designing, implementing, and maintaining secure CI/CD pipelines, cloud infrastructure, monitoring solutions, and deployment frameworks while ensuring security and compliance are embedded into every stage of application delivery.

• *Key Responsibilities**

• *DevOps \& Automation**

• Design, implement, and maintain CI/CD pipelines for automated build, test, security scanning, and deployment processes.
• Automate infrastructure provisioning and configuration management using Infrastructure as Code (IaC).
• Improve deployment reliability, scalability, and efficiency across environments.
• Manage release processes and act as a deployment gatekeeper to ensure production readiness.

• *Security Integration**

• Embed security controls throughout the Software Development Lifecycle (SDLC).
• Implement and manage security scanning tools for code, containers, dependencies, and infrastructure.
• Perform vulnerability assessments and coordinate remediation activities.
• Ensure compliance with security policies, standards, and regulatory requirements.

• *Cloud \& Infrastructure Management**

• Manage and optimize cloud and on\-premises infrastructure environments.
• Monitor system performance, availability, and capacity.
• Implement infrastructure hardening and security best practices.
• Support containerized workloads and orchestration platforms.

• *Monitoring \& Incident Response**

• Build and maintain observability solutions, including logging, monitoring, and alerting.
• Participate in incident management and root cause analysis activities.
• Drive continuous improvements to platform reliability and operational resilience.

• *Collaboration \& Governance**

• Partner closely with Development, QA, Application Support, Architecture, and Security teams.
• Provide guidance on DevSecOps best practices and secure development principles.
• Maintain technical documentation, operational runbooks, and deployment procedures.
• Support audit, compliance, and governance activities.

• *Required Qualifications**

• Bachelor's degree in Computer Science, Information Technology, Engineering, or related field.
• 5\+ years of experience in DevOps, Infrastructure Engineering, Cloud Operations, or DevSecOps roles.
• Strong experience with CI/CD tools such as GitLab CI, Azure DevOps, GitHub Actions, Jenkins, or similar.
• Experience with cloud platforms (Azure, AWS, or Google Cloud).
• Proficiency in scripting and automation using PowerShell, Python, Bash, or similar.
• Experience with Infrastructure as Code tools such as Terraform, Bicep, ARM, or CloudFormation.
• Knowledge of container technologies such as Docker and Kubernetes.
• Understanding of security frameworks, vulnerability management, and application security practices.
• Experience with monitoring and observability platforms such as Dynatrace, Azure Monitor, Splunk, Datadog, Clarity, Grafana, or Prometheus.

• *Preferred Qualifications**

• Security certifications such as Security\+, CISSP, CSSLP, or equivalent.
• Cloud certifications (Azure, AWS, GCP).
• Experience implementing Zero Trust and Secure Software Supply Chain practices.
• Experience with API security, WAF, IAM, and secrets management solutions.

• *Key Competencies**

• Security\-first mindset
• Strong problem\-solving and analytical skills
• Automation and continuous improvement focus
• Collaboration and stakeholder management
• Excellent communication and documentation skills
• Ownership and accountability

• *Success Measures**

• Increased deployment automation and reliability
• Reduced security vulnerabilities and remediation time
• Improved platform availability and operational performance
• Faster and more secure release cycles
• High compliance with security and governance standards