Sr. DevSecOps Engineer

We are seeking a highly skilled Senior DevSecOps Engineer with 4 to 7 years of experience to join our Digital Enterprise team.

In this role, you will be the driving force behind "shifting security left" across our entire software development lifecycle (SDLC).

You will bridge the gap between development, operations, and security teams by designing, building, and maintaining secure, automated, and observable cloud-native pipelines.

The ideal candidate has deep technical execution skills in infrastructure-as-code (IaC), continuous integration/continuous deployment (CI/CD), and advanced vulnerability management.

• Pipeline Security Automation: Integrate and automate security gates into CI/CD pipelines (e.g., SAST, DAST, SCA, and secrets scanning) without slowing down standard delivery cadences.
• Infrastructure as Code (IaC): Design, implement, and maintain highly secure cloud environments using code orchestration tools.
• Container & Orchestration Security: Harden, deploy, and troubleshoot containerized architectures and microservices while implementing admission control policies.
• Secrets Management: Architect and manage enterprise secrets, cryptographic keys, and credential rotation workflows.
• Policy & Compliance Automation: Implement Policy-as-Code to dynamically block insecure cluster deployments and gather compliance evidence for regulatory audits.
• Threat Modeling & Governance: Lead proactive threat-modeling reviews during early system architecture designs to identify systemic risks.
• Collaboration & Culture: Coach development teams on secure coding standards, triage vulnerabilities, and conduct joint incident responses.

AWS, Azure, or GCP (Advanced identity management and network isolation)