Senior Devsecops engineer

Job Title: Senior DevSecOps Engineer

Location: Ahmedabad, Gujarat.

Company: Autoroute Sant India Pvt. Ltd. (A Subsidiary of BeLocum, Canada)

About Us:
Autoroute Sant India Pvt. Ltd. is the India development center of BeLocum Canada, a leading healthcare technology company providing innovative software solutions for the healthcare staffing industry. We are looking for a highly skilled Senior DevSecOps Engineer to strengthen our cloud infrastructure, security posture, automation, and DevOps practices while ensuring high availability, scalability, and operational excellence.

Experience required:

Minimum 5 plus years of hands-on experience in DevOps/DevSecOps.
Strong experience with AWS Cloud, CI/CD, Infrastructure as Code (IaC), security automation, monitoring, and production support.

Key Responsibilities:

1. CI/CD & Release Automation

Design, implement, and optimize secure CI/CD pipelines to enable automated build, testing, deployment, and release management while ensuring application security throughout the SDLC.

2. Cloud Infrastructure & Infrastructure as Code (AWS)

Design, deploy, and maintain secure, scalable, and highly available cloud infrastructure on AWS using Infrastructure as Code (IaC) principles and configuration management best practices.

3. Database Security & Availability

Implement database security best practices, including access controls, encryption, auditing, backup strategies, high availability, and disaster recovery to ensure data integrity and business continuity.

4. Security Monitoring & Incident Response

Implement and manage security monitoring solutions, proactively investigate security incidents, perform root cause analysis, and coordinate timely remediation activities.

5. Infrastructure Monitoring & Logging

Configure and maintain centralized monitoring and logging solutions to ensure application health, infrastructure performance, proactive alerting, troubleshooting, and security visibility.

6. DevSecOps & Security Automation

Integrate automated security controls, vulnerability scanning, compliance validation, and security testing into CI/CD pipelines to strengthen secure software delivery.

7. Secure Software Development

Partner with development teams to implement secure coding practices, perform security reviews, vulnerability assessments, and recommend remediation strategies throughout the development lifecycle.

8. Compliance, Governance & Audits

Ensure infrastructure and applications comply with security standards, regulatory requirements, and internal governance through periodic audits, documentation, and continuous compliance monitoring.

9. Risk Assessment & Security Improvements

Conduct infrastructure and application risk assessments, identify security vulnerabilities, and implement mitigation plans to reduce operational and cybersecurity risks.

10. Knowledge Sharing & Security Awareness

Promote security awareness by mentoring engineering teams, conducting knowledge-sharing sessions, and maintaining technical documentation, SOPs, runbooks, and internal knowledge repositories.

11. Security Tooling & Integration

Evaluate, implement, and manage DevSecOps and security tools such as vulnerability scanners, container security solutions, SIEM platforms, secrets management, and code analysis tools.

12. Disaster Recovery & Business Continuity

Design, test, and continuously improve disaster recovery, backup, failover, and business continuity strategies to ensure maximum service availability and resilience.

13. Proactive Operational Excellence

Proactively identify infrastructure, security, and operational risks before they impact production, and implement preventive measures to ensure stable, reliable, and secure environments.

14. Stakeholder Communication & Collaboration

Demonstrate excellent communication and stakeholder management skills by effectively collaborating with Product Owners, Project Managers, Developers, QA teams, and business stakeholders to drive successful project delivery.

15. Leverage AI-driven DevOps and automation tools to improve operational efficiency, automate repetitive tasks, enhance security monitoring, and optimize software delivery processes.

Preferred Technical Skills:

AWS (EC2, ECS/EKS, RDS, S3, IAM, VPC, CloudWatch, CloudTrail, Route 53).
Docker & Kubernetes
Terraform / CloudFormation.
Jenkins, GitHub Actions, GitLab CI or Azure DevOps.
Linux Administration
Git & Version Control.
Monitoring & Logging (Grafana, Prometheus, ELK/OpenSearch, CloudWatch).
Security Tools (SonarQube, Snyk, Trivy, OWASP, SIEM, WAF)
Scripting: Bash, Python, PowerShell.
Database Administration (MySQL/PostgreSQL)
Strong troubleshooting and production support skills.

Preferred Competencies:

Strong analytical and problem-solving skills.
Ability to work under pressure and manage multiple priorities.
Excellent stakeholder communication.
Proactive approach to identifying and resolving operational risks.