The Role
Designs, automates, secures, and governs AWS and Kubernetes infrastructure. Integrates vulnerability scanning and compliance validation into CI/CD pipelines, enforces IAM, RBAC, least-privilege, and security policies, and automates remediation and reporting. Maintains visibility using AWS security services, supports ISO 27001 and SOC 2 audits, and trains engineering teams on secure development practices.
Summary Generated by Built In
Job Title: DevSecOps Engineer
Department: Technology
Location: Poloroche Business Avenue, Viman Nagar, Pune
Experience: 2+ years
Reporting To: Senior Principal SRE and Head of Engineering
Role Overview
The DevSecOps Engineer - will be responsible for the secure design, automation, and compliance of cloud-native infrastructure across AWS and Kubernetes environments. This role focuses on embedding security controls within AWS workloads and CI/CD pipelines to ensure continuous compliance with organizational and regulatory standards.
Key Responsibilities
● Deploy, secure, and manage Kubernetes environments in alignment with CIS and NIST controls.
● Implement AWS security best practices for IAM, networking, storage, encryption, and logging.
● Integrate security validation stages into CI/CD pipelines, ensuring vulnerability scanning and compliance checks are automated.
● Utilize AWS Config, AWS Organizations, Security Hub, GuardDuty, and CloudTrail to maintain continuous visibility and governance over workloads.
● Author and enforce security policies, RBAC configurations, and least-privilege access models.
● Automate governance tasks such as tagging enforcement, configuration remediation, and compliance reporting using Lambda or Step Functions.
● Support compliance audits by providing configuration evidence and remediation reports.
● Collaborate with cross-functional teams to ensure adherence to ISO 27001 and SOC2 security - compliance standards throughout the development lifecycle.
● Conduct internal security training sessions for development and engineering teams across the organization.
Required Qualifications and Skills
● Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field.
● 2+ years of experience in DevSecOps, Cloud Security, or Infrastructure Automation.
● Proficiency in at least one CI/CD tool, such as CircleCI, Argo Project, GitHub Actions, or similar, is essential.
● Exposure of Kubernetes operations, security configurations, and policy enforcement.
● Hands-on experience with AWS services including IAM, EC2, S3, VPC, Lambda, Organizations, Secrets Manager, Security Hub, CloudTrail, CloudWatch, EventBridge, Security Hub, Route 53, CloudFront, and ECR.
● Experience integrating automated security tools like SonarQube, OWASP ZAP, Synk, into CI/CD pipelines for proactive vulnerability management.
● Understanding of the OWASP Top 10 vulnerabilities and secure coding practices.
● Working knowledge of security and compliance frameworks including ISO 27001 and SOC2, and the ability to implement controls supporting these standards across cloud environments.
Good to Have
● Understanding of OIDC, SSO, and identity federation between Kubernetes and AWS.
● Exposure to Kubernetes Admission Controllers, OPA/Gatekeeper, or Kyverno for policy enforcement.
● Experience with centralized secrets management tools such as AWS Secrets Manager.
● Contribution to open-source DevSecOps tools, community projects, or speaking engagements at security conferences.
● Relevant AWS or Kubernetes certifications
Skills Required
- Bachelor's or Master's degree in Computer Science, Information Security, or a related field
- 2+ years of experience in DevSecOps, Cloud Security, or Infrastructure Automation
- Proficiency with at least one CI/CD tool, such as CircleCI, Argo Project, GitHub Actions, or similar
- Exposure to Kubernetes operations, security configurations, and policy enforcement
- Hands-on experience with AWS IAM, EC2, S3, VPC, Lambda, Organizations, Secrets Manager, Security Hub, CloudTrail, CloudWatch, EventBridge, Route 53, CloudFront, and ECR
- Experience integrating automated security tools such as SonarQube, OWASP ZAP, and Snyk into CI/CD pipelines
- Understanding of OWASP Top 10 vulnerabilities and secure coding practices
- Working knowledge of ISO 27001 and SOC 2 security and compliance frameworks
- Understanding of OIDC, SSO, and identity federation between Kubernetes and AWS
- Exposure to Kubernetes Admission Controllers, OPA/Gatekeeper, or Kyverno
- Experience with centralized secrets management tools such as AWS Secrets Manager
- Contribution to open-source DevSecOps tools, community projects, or security conference speaking engagements
- Relevant AWS or Kubernetes certifications
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Intangles is an IOT company based out of Pune with its expertise in Advance Telemetry and Operations Automation. Intangles has developed its own set of proprietary algorithms which allows fleet operators to monitor the performance of the vehicle in real time. The biggest USP is the state of the art proprietary algorithms which allows fleet operators to take informed decisions. Intangles aspires to be the world’s foremost authority in Telemetry and Vehicle Performance monitoring through predictive/prognostic monitoring and benchmarking performance of the vehicle based on its own Data analytics platform “Indium”. Our vision is to help fleet operators monitor, benchmark and do predictive maintenance of assets and identify underperforming assets to increase overall operational profits.
