Build and secure AWS infrastructure, automate CI/CD deployments, manage Terraform-based infrastructure, and operate Docker/Kubernetes workloads. Integrate security scanning and vulnerability remediation into delivery pipelines, troubleshoot infrastructure incidents, manage Linux environments, and improve monitoring and availability. Support VAPT activities, security reviews, compliance evidence, client audits, backup and recovery, and controlled releases across development, UAT, and production.
DevSecOps/Secure DevOps Engineer
About the Role:
We are hiring a hands-on Secure DevOps Engineer to build and secure AWS environments, automate deployments, and own CI/CD,
infrastructure as code, containerized workloads, monitoring, and vulnerability remediation across development, UAT, and production.
You'll integrate security into delivery pipelines, independently troubleshoot issues, and drive remediation to closure.
Location: Kolkata
Key Responsibilities
• Build and manage secure AWS infrastructure using EC2, VPC, IAM, S3, RDS, ECR/EKS, ALB, Route 53, CloudWatch, KMS, and related
services.
• Design and maintain CI/CD pipelines using Jenkins, GitLab CI, GitHub Actions, or equivalent.
• Manage controlled deployments across Dev/UAT/Production, including configuration management, rollback, and release support.
• Implement Terraform-based Infrastructure as Code with secure state management and version-controlled changes.
• Secure AWS environments using least-privilege IAM, network controls, encryption, secrets management, logging, WAF, CloudTrail,
GuardDuty, and Security Hub.
• Manage Docker and Kubernetes/EKS workloads, including image security, RBAC, secrets, and workload access.
• Integrate SAST, DAST, SCA, secrets scanning, IaC scanning, and container vulnerability scanning into CI/CD pipelines.
• Identify, prioritize, remediate, retest, and close Critical/High vulnerabilities and VAPT findings.
• Monitor application infrastructure, troubleshoot deployment/infrastructure incidents, and improve availability and observability.
• Review existing environments for configuration drift, excessive access, exposed services, insecure credentials, manual deployment
risks, and monitoring gaps.
• Manage Linux administration, DNS/SSL, backup/recovery, and incident troubleshooting across environments.
• Support VAPT, security reviews, ISO 27001/SOC 2 evidence, technical questionnaires, and client audits.
Requirements
• 4-6 years of hands-on DevSecOps experience.
• Strong practical AWS infrastructure and security experience.
• Hands-on Terraform/Infrastructure-as-Code experience.
• Strong CI/CD and deployment automation experience.
• Hands-on Docker and Kubernetes/EKS experience (practical working knowledge; deep platform engineering only where EKS is a core
production dependency).
• Working knowledge of SAST, DAST, SCA, secrets, IaC, and container scanning.
• Experience with SonarQube, Trivy, OWASP ZAP, or equivalent tools.
• Good Linux administration and Bash/Python scripting skills.
• Git/GitLab or equivalent source-control experience.
• Strong troubleshooting, incident handling, vulnerability remediation, deployment rollback, secrets handling, and communication
skills
Good to Have
• Azure security exposure such as Defender for Cloud, Entra ID/Azure AD, and Key Vault.
• ISO 27001, SOC 2, or similar compliance exposure.
• AWS, Kubernetes, Terraform, or Security certifications.
• Experience with backup/restore, disaster recovery, and cost optimization.
Similar Jobs
Cloud • Information Technology • Internet of Things • Machine Learning • Software • Cybersecurity • Infrastructure as a Service (IaaS)
Analyze, develop, and execute integration test cases for network systems. Prepare and validate scripts and configurations, troubleshoot issues, perform integration and migration tasks, and maintain accurate operating system, hardware, software, licensing, and configuration data. The role also involves project scoping, cost and time estimation, process adherence, service delivery, stakeholder management, data security, privacy, and compliance with environmental, occupational health, safety, legal, and financial requirements.
Top Skills:
Artificial IntelligenceAutomationData AnalyticsHardwareOperating SystemsSoftware Configuration
Cloud • Information Technology • Internet of Things • Machine Learning • Software • Cybersecurity • Infrastructure as a Service (IaaS)
Design and deliver production-grade GenAI systems and agents for Telecom OSS/BSS: build RAG pipelines, train and optimize LLM/SLM models, deploy scalable Python services/APIs, and integrate cloud-native ML solutions to drive automation, intelligence, and decisioning at scale.
Top Skills:
Agent Orchestration FrameworksAPIsAws BedrockDatabricksDatarobotDeep LearningEmbeddingsGcp Vertex AiGenaiKnowledge GraphLlmMachine LearningMcpNlpPythonRagRetrieval SystemsSlmSnowflake
Cloud • Information Technology • Internet of Things • Machine Learning • Software • Cybersecurity • Infrastructure as a Service (IaaS)
Lead and deliver enterprise-scale AI/GenAI projects: translate business problems into scalable solutions, manage cross-functional teams, oversee model development/deployment, define MLOps standards, select LLMs and vector DBs, drive estimations and ROI, ensure compliance and responsible AI, and mentor team members while managing risk and agile delivery.
Top Skills:
AutogenAws BedrockAzure OpenaiCi/Cd For MlCrew.AiDockerElasticEmbeddingsGcp Vertex AiHugging FaceKubernetesLangchainLanggraphLlamaindexMilvusMlopsPineconePythonPyTorchRag PipelinesTensorFlowVector Databases
What you need to know about the Kolkata Tech Scene
When considering the industries shaping India's tech scene, gaming might not immediately come to mind. However, in the last decade, increased internet usage and greater access to mobile devices have catapulted the industry to new heights, with Kolkata-based companies like Virtualinfocom, Red Apple Technologies and Digitoonz, at the forefront, driving the design and animation of new gaming titles for players.
