TECHNICAL LEAD - Devsecops

Job Description ? DevSecOps Engineer

Location Hybrid

Employment Type Full-Time

Job Summary We are looking for a highly skilled Azure DevSecOps Engineer to design, implement, and manage secure, automated, and scalable cloud delivery platforms on Microsoft Azure. The ideal candidate will have extensive experience in CI/CD, Infrastructure as Code (IaC), cloud security, container platforms, Kubernetes, and Azure-native services. This role requires close collaboration with development, infrastructure, security, and operations teams to build secure-by-design solutions and drive DevSecOps best practices across the organization.

Key Responsibilities Azure Cloud & Infrastructure

• Design and implement secure, scalable, and highly available Azure cloud infrastructure.
• Manage Azure subscriptions, resource groups, networking, storage, and compute resources.
• Implement Azure Landing Zones, governance, and resource organization.
• Configure Azure Virtual Networks, VPN Gateway, ExpressRoute, Azure Firewall, Application Gateway, Azure Front Door, Load Balancer, and Private Endpoints.
• Ensure business continuity through Azure Backup and Azure Site Recovery.

DevOps & CI/CD

• Design, build, and maintain CI/CD pipelines using Azure DevOps and GitHub Actions.
• Automate application build, testing, security validation, and deployment.
• Implement blue-green, rolling, and canary deployment strategies.
• Integrate automated approvals and quality gates into deployment pipelines.
• Manage release orchestration across development, QA, staging, and production environments.

Infrastructure as Code (IaC)

• Develop reusable Infrastructure as Code
• Implement GitOps practices for infrastructure provisioning.
• Automate provisioning, configuration, and lifecycle management of Azure resources.

Containerization & Kubernetes

• Build and maintain Azure Kubernetes Service (AKS) environments.
• Deploy and manage containerized workloads using Docker.
• Configure Helm charts, Kubernetes manifests, and ingress controllers.
• Manage scaling, upgrades, and cluster security.
• Implement container image lifecycle management using Azure Container Registry (ACR).

DevSecOps & Security

• Embed security into every phase of the software delivery lifecycle.
• Integrate security scanning into CI/CD pipelines, including: + Static Application Security Testing (SAST) + Dynamic Application Security Testing (DAST) + Software Composition Analysis (SCA) + Container image scanning + Secret detection + Infrastructure-as-Code scanning
• Implement Microsoft Defender for Cloud recommendations.
• Configure Microsoft Entra ID (Azure AD), RBAC, Conditional Access, PIM, and Key Vault.
• Enforce Azure Policy, governance, and compliance standards.

Monitoring & Observability

• Configure Azure Monitor, Log Analytics, Application Insights, and Azure Alerts.
• Build dashboards for infrastructure and application health.
• Support centralized logging and monitoring.
• Analyze incidents and perform root cause analysis (RCA).
• Improve reliability through proactive monitoring and automation.

Automation & Scripting

• Develop automation
• Automate operational tasks, deployments, patching, and reporting.

Collaboration & Leadership

• Partner with development, QA, infrastructure, and security teams.
• Mentor junior DevOps engineers.
• Conduct architecture and code reviews.
• Promote DevSecOps best practices and continuous improvement.
• Participate in Agile ceremonies and sprint planning.

Soft Skills

• Strong problem-solving and analytical abilities.
• Excellent written and verbal communication.
• Ability to work with cross-functional global teams.
• Strong stakeholder management and customer-facing skills.
• Self-driven with a continuous learning mindset.
• Ability to mentor and guide junior team members. Devsecops, Kubernetes, Azure Cloud