We are seeking a DevSecOps Engineer for our Gen AI team to design, build, and maintain secure, scalable cloud infrastructure and CI/CD pipelines that enable reliable software delivery. In this role, you will embed security throughout the software development lifecycle, automate infrastructure and deployment processes, optimize cloud environments on Microsoft Azure, and collaborate with cross-functional teams to deliver resilient, high-performing, and compliant SaaS solutions
What You'll Be Doing
- Design, implement, and maintain secure, scalable, and highly available cloud infrastructure in Microsoft Azure.
- Build and manage Infrastructure as Code (IaC) using Terraform, Bicep, or ARM templates, leveraging modular and reusable configurations.
- Develop, maintain, and optimize CI/CD pipelines using Azure DevOps, GitHub Actions, or Jenkins to enable reliable software delivery.
- Automate infrastructure provisioning, deployments, monitoring, and operational tasks using PowerShell, Bash, or Python.
- Design and support secure multi-tenant SaaS architectures, implementing effective tenant isolation and scalable deployment strategies.
- Deploy and manage Azure services including Azure Kubernetes Service (AKS), App Services, Virtual Networks (VNets), Key Vault, Load Balancer, Firewall, and Application Gateway.
- Build, deploy, and manage containerized applications using Docker, Kubernetes, and Helm while implementing container security best practices.
- Integrate security throughout the software development lifecycle by implementing automated security scanning, policy enforcement, approval gates, and rollback strategies within CI/CD pipelines.
- Monitor cloud infrastructure for performance, availability, scalability, and cost optimization using auto-scaling, alerts, budgets, and monitoring tools.
- Implement and maintain cloud security controls including IAM, RBAC, network segmentation, private endpoints, encryption, Azure Defender for Cloud, Microsoft Sentinel, Azure Firewall, and Key Vault.
- Support security compliance initiatives by adhering to frameworks such as SOC 2, ISO 27001, and CIS Benchmarks.
- Participate in vulnerability management, threat detection, incident response, remediation, root cause analysis, and post-incident reviews
What You'll Need to Be Successful
- Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field, or an equivalent combination of education and experience.
- 5+ years of experience in DevOps, DevSecOps, Cloud Engineering, Site Reliability Engineering (SRE), or a similar role.
- Strong hands-on experience with Microsoft Azure cloud services and cloud-native architecture.
- Expertise with Azure Kubernetes Service (AKS), Docker, Kubernetes, Helm, and container lifecycle management.
- Proven experience designing and implementing Infrastructure as Code using Terraform, Bicep, or ARM templates.
- Experience building and maintaining CI/CD pipelines using Azure DevOps, GitHub Actions, or Jenkins.
- Strong scripting and automation skills using PowerShell, Bash, Python, or similar languages.
- Solid understanding of cloud networking, IAM, RBAC, Zero Trust architecture, network segmentation, and secure cloud design principles.
- Experience implementing cloud security controls, vulnerability management, container image scanning, and secrets management.
- Knowledge of Microsoft security services including Defender for Cloud, Microsoft Sentinel, Azure Key Vault, Azure Firewall, and private endpoints.
- Familiarity with compliance and governance frameworks such as SOC 2, ISO 27001, and CIS Benchmarks.
- Excellent communication and collaboration skills, with the ability to work effectively across engineering, architecture, security, and product teams.
- Microsoft Azure certifications (e.g., AZ-104, AZ-400, AZ-500, or AZ-305) are considered an asset.
