DevSecOps Engineer

About the role

The DevSecOps Engineer will design and implement secure, automated infrastructure across multiple cloud platforms. This position focuses on embedding security into every layer of our cloud environment, from IaC provisioning to CI/CD pipelines and incident response.

Key responsibilities

• Design and deploy secure multi‑cloud infrastructure on AWS and Alibaba Cloud using Terraform/Terragrunt with security best practices.
• Build and maintain secure CI/CD pipelines with SAST/DAST integration and automated security gates.
• Architect Azure Sentinel SIEM solutions and Logic Apps for automated incident response.
• Implement Cloudflare Zero Trust network architecture, tunnels, and policies.
• Create IaC templates for hardened Kubernetes clusters, including network policies and RBAC.
• Set up secrets management using AWS Secrets Manager and HashiCorp Vault.
• Design centralized logging and monitoring with the ELK stack and FluentBit.
• Develop automated vulnerability scanning, remediation workflows, and backup/disaster‑recovery processes with encryption.
• Define database security hardening for MySQL, PostgreSQL, and Redis.
• Lead security automation for threat hunting, incident response, and compliance as code.

Required profile

• 10+ years of infrastructure security or DevSecOps experience in enterprise environments.
• Deep knowledge of AWS security services (GuardDuty, Security Hub, Config, EKS, ECR, RDS, EC2, ECS, S3) and Alibaba Cloud security features.
• Extensive experience with Terraform/Terragrunt, Kubernetes security (Pod Security Standards, Network Policies, RBAC), and Zero Trust networking.
• Proven ability to design secure CI/CD pipelines and supply‑chain security.
• Strong troubleshooting and incident‑response skills.

Required skills

• Terraform, Terragrunt
• AWS, Alibaba Cloud, Azure Sentinel
• Cloudflare Zero Trust
• Kubernetes, Helm
• ELK stack, FluentBit
• AWS Secrets Manager, HashiCorp Vault
• Python, Go, Bash
• SAST/DAST tools
• Infrastructure vulnerability scanning tools