AWS DevSecOps Engineer

Job Title:

AWS DevSecOps Engineer | GitHub Actions | GHAS | EKS | Terraform Location : Pan India

Experience : 10+ Years

Job Summary We are seeking a highly skilled

AWS DevSecOps Engineer with strong expertise in

GitHub Actions, GitHub Advanced Security (GHAS), AWS, Kubernetes (EKS), and Infrastructure as Code . The ideal candidate will be responsible for designing and managing secure CI/CD platforms, implementing GitHub Enterprise governance, integrating security controls into development workflows, and enabling scalable cloud-native deployments across multiple environments.

Key Responsibilities

• Design, implement, and maintain GitHub Actions workflows across development, staging, and production environments.
• Build, manage, and optimize self-hosted Actions Runner Controller (ARC) runners on Kubernetes (EKS).
• Implement runner auto-scaling, pod identity, workload isolation, and network security policies.
• Integrate GitHub Advanced Security (GHAS) capabilities, including:
• Secret Scanning
• Push Protection
• CodeQL Scanning
• Dependency Review
• Migrate legacy CI/CD pipelines from Jenkins, TeamCity, AWS CodePipeline, and CodeBuild to GitHub Actions.
• Enforce GitHub governance controls, including branch protection rules, required status checks, deployment approvals, and environment gates.
• Develop reusable GitHub Actions, composite actions, and reusable workflow templates for enterprise-wide adoption.
• Collaborate with Security and Engineering teams to implement SAST, DAST, SCA, and secrets management practices throughout the software delivery lifecycle.
• Manage GitHub Enterprise Cloud (GHEC) or Enterprise Managed Users (EMU) environments.
• Configure user provisioning, access control, SCIM integrations, and Okta-based identity management.
• Monitor CI/CD platforms using Splunk, CloudWatch, Datadog, and logging solutions.
• Support Infrastructure-as-Code deployments using Terraform, CloudFormation, and AWS CDK.
• Drive DevSecOps best practices, automation, compliance, and platform reliability.

Required Skills & Qualifications Technical Skills

• 10+ years of experience in DevOps, DevSecOps, or Platform Engineering.
• Strong hands-on experience with GitHub Actions and GitHub Enterprise.
• Experience implementing GitHub Advanced Security (GHAS).
• Strong AWS cloud experience.
• Hands-on experience with Kubernetes and Amazon EKS.
• Experience managing self-hosted runners and ARC (Actions Runner Controller).
• Expertise in CI/CD pipeline design and automation.
• Strong understanding of application security concepts including:
• SAST
• DAST
• SCA
• Secrets Management
• Experience with Infrastructure as Code:
• Terraform
• CloudFormation
• AWS CDK
• Experience with monitoring and observability tools such as Splunk, Datadog, and CloudWatch.
• Strong scripting skills using Bash, Python, or PowerShell.
• Experience with GitOps and modern deployment practices.

Preferred Skills

• Experience migrating enterprise CI/CD platforms to GitHub Actions.
• Knowledge of Zero Trust and DevSecOps frameworks.
• Exposure to container security platforms and cloud security tools.
• Experience in regulated or compliance-driven environments.

Education

• Bachelor's Degree in Computer Science, Information Technology, Engineering, or a related field.

Certifications (Preferred)

• AWS Certified DevOps Engineer – Professional
• AWS Certified Solutions Architect
• Certified Kubernetes Administrator (CKA)
• GitHub Actions Certification
• GitHub Advanced Security Certification
• HashiCorp Terraform Certification