Overview

Job Overview We are looking for an experienced Cloud Security / DevSecOps Engineer to design, implement, and maintain secure cloud infrastructure and deployment pipelines across AWS and Kubernetes environments.

Responsibilities

• Design and implement secure and scalable infrastructure on AWS. Secure and manage Kubernetes clusters and containerized workloads.
• Implement security controls across the cloud infrastructure, applications, containers, and CI/CD pipelines.
• Integrate security practices into the DevOps lifecycle (DevSecOps).
• Develop and maintain secure CI/CD pipelines with automated security checks.
• Implement Infrastructure as Code (IaC) using tools such as Terraform or CloudFormation. Configure and manage AWS security services including IAM, KMS, CloudTrail, GuardDuty, Security Hub, WAF, and VPC security controls.
• Implement identity and access management, least-privilege policies, roles, permissions, and secrets management. Secure container images and Kubernetes workloads through vulnerability scanning and policy enforcement.
• Implement Kubernetes security controls including RBAC, Network Policies, Pod Security, Secrets management, and admission controls. Monitor cloud environments for security threats, vulnerabilities, misconfigurations, and suspicious activity. Perform vulnerability assessments and coordinate remediation of security issues.
• Integrate tools such as SAST, DAST, SCA, container scanning, and IaC scanning into CI/CD pipelines. Investigate and respond to cloud and infrastructure security incidents. Establish security best practices, standards, and reusable controls for engineering teams.
• Conduct security reviews of infrastructure, architecture, and deployment configurations.
• Automate security processes and compliance checks wherever possible.
• Work Mode: Remote Location: Bengaluru Skills: AWS, Kubernetes, DevSecOps, Terraform, CI/CD, Docker, IAM, Container Security, Vulnerability Management, Python
• Work mode: Bengaluru Experience: 3–8 years