DevSecOps Engineer

We are looking for a motivated DevSecOps Engineer to join our team and help embed security into our software development lifecycle while supporting deployment velocity, platform reliability, and compliance efforts. You will work alongside senior engineers on CI/CD, cloud security, infrastructure automation, and secure engineering practices across the organization.

Roles and Responsibilities

DevOps & CI/CD

• Support and maintain CI/CD pipelines for reliability, security, and speed.
• Assist in implementing shift-left security practices in development workflows.
• Help build automated quality and security gates into release processes.
• Support secure, zero-downtime deployment strategies under guidance from senior team members.

Cloud & Infrastructure

• Assist in managing cloud environments (AWS/GCP/Azure) with governance controls.
• Write and maintain Infrastructure-as-Code using Terraform.
• Package and deploy applications to Kubernetes using Helm charts.
• Support secure cloud architecture practices, including basic IAM policy configuration and network segmentation.
• Contribute to container security practices (Docker, Kubernetes).

Application & Platform Security

• Help integrate SAST, DAST, SCA, and container scanning tools into CI pipelines.
• Support vulnerability management and remediation tracking.
• Assist with secrets management and encryption best practices.
• Participate in security reviews under guidance from senior engineers.

Compliance & Monitoring

• Support adherence to regulatory and security requirements (ISO 27001, SOC 2, PCI-DSS, etc.).
• Assist in maintaining security monitoring, logging, and alerting.
• Help track and document compliance and security posture metrics.

Automation & Reliability

• Identify opportunities to automate manual processes and reduce operational toil.
• Support observability, logging, and monitoring improvements.
• Assist with basic disaster recovery and resilience tasks alongside SRE.

Required Qualifications

• 1 year of experience in DevOps, DevSecOps, SRE, or related roles (internships/relevant project experience considered).
• Working knowledge of at least one cloud platform (AWS/GCP/Azure).
• Hands-on experience with Terraform for Infrastructure-as-Code.
• Hands-on experience with Helm for Kubernetes application deployment.
• Familiarity with CI/CD tools (Jenkins, GitHub Actions, GitLab CI, or similar).
• Basic understanding of DevSecOps principles and secure SDLC concepts.
• Exposure to containerization and orchestration (Docker, Kubernetes).
• Exposure to security tools (SAST, DAST, or vulnerability scanners) is a plus.
• Basic understanding of IAM, network security, and encryption concepts.
• Proficiency in at least one scripting/programming language (Python, Go, Bash).

Good to Have

• Certifications in AWS/GCP/Azure or Kubernetes (CKA, CKAD).
• Exposure to compliance frameworks (ISO 27001, SOC 2, PCI-DSS).
• Prior HealthCare or regulated-industry project exposure.