Senior DevSecOps Engineer

This role is for one of the Weekday's clients

Salary range: Rs 2000000 - Rs 6000000 (ie INR 20-60 LPA)

Experience: 6+ yrs

Location: Bengaluru

Job Type: Full-Time

We are seeking a highly skilled Senior DevSecOps Engineer with 6+ years of experience to drive the design, implementation, and continuous improvement of secure cloud infrastructure and DevSecOps practices. The ideal candidate will possess deep expertise in Cloud Security, AWS, and DevSecOps, with a strong focus on integrating security throughout the software development lifecycle while enabling high-velocity engineering teams.

In this role, you will be responsible for building secure, scalable, and automated cloud platforms that support modern application development. You will work closely with software engineering, platform, security, and infrastructure teams to embed security into CI/CD pipelines, automate compliance, strengthen cloud governance, and enhance the overall security posture of enterprise applications. This is an excellent opportunity for professionals passionate about cloud-native technologies, automation, and proactive security engineering.

• Design, implement, and maintain secure cloud infrastructure on AWS using security-first architecture principles.
• Integrate security controls into CI/CD pipelines to enable continuous security testing and automated compliance throughout the software development lifecycle.
• Develop and enhance DevSecOps processes by embedding vulnerability scanning, secrets management, code analysis, and security validation into deployment workflows.
• Build and maintain secure Infrastructure as Code (IaC) solutions using industry-standard automation frameworks.
• Collaborate with development, operations, and security teams to identify, assess, and remediate infrastructure and application security risks.
• Implement cloud security best practices, including identity and access management, encryption, network segmentation, logging, monitoring, and incident response.
• Automate security governance, policy enforcement, and compliance checks across cloud environments.
• Manage container security for Docker and Kubernetes environments, ensuring secure image management, runtime protection, and cluster hardening.
• Monitor cloud environments for vulnerabilities, security events, and configuration drift, taking proactive measures to mitigate risks.
• Support threat modeling, security reviews, and risk assessments for new applications and infrastructure initiatives.
• Improve operational efficiency through automation, scripting, and standardized deployment processes.
• Troubleshoot complex cloud infrastructure, deployment, and security issues while ensuring high platform availability and reliability.
• Maintain technical documentation, security standards, architecture guidelines, and operational runbooks.
• Stay updated with emerging cloud security threats, DevSecOps practices, and AWS security services to drive continuous improvement.

• 6+ years of hands-on experience in DevSecOps, Cloud Security, or Platform Engineering roles.
• Strong expertise in AWS cloud services and cloud security architecture.
• Proven experience implementing DevSecOps practices and integrating security into CI/CD pipelines.
• Solid understanding of cloud security principles, IAM, network security, encryption, monitoring, and compliance frameworks.
• Experience with Infrastructure as Code (IaC) tools for automated infrastructure provisioning and management.
• Hands-on knowledge of containerization technologies, including Docker and Kubernetes, with a focus on container security.
• Strong scripting and automation skills using tools such as Python, Shell, or similar languages.
• Experience with vulnerability management, security scanning, secrets management, and policy enforcement tools.
• Strong understanding of secure software development lifecycle (SSDLC) methodologies and modern DevOps practices.
• Excellent analytical, troubleshooting, and problem-solving skills with the ability to resolve complex technical challenges.
• Strong collaboration and communication skills, with experience working across engineering, operations, and security teams.
• Self-driven mindset with a passion for automation, continuous improvement, and building secure, scalable cloud platforms.