Overview

We are looking for an experienced Cloud Security / DevSecOps Engineer to design, implement, and maintain secure cloud infrastructure and deployment pipelines across AWS and Kubernetes environments.

Responsibilities

• Design and implement secure and scalable infrastructure on AWS.
• Implement security controls across the cloud infrastructure, applications, containers, and CI/CD pipelines.
• Integrate security practices into the DevOps lifecycle (DevSecOps).
• Develop and maintain secure CI/CD pipelines with automated security checks.
• Implement Infrastructure as Code (IaC) using tools such as Terraform or CloudFormation.
• Implement identity and access management, least-privilege policies, roles, permissions, and secrets management.
• Implement Kubernetes security controls including RBAC, Network Policies, Pod Security, Secrets management, and admission controls.
• Integrate tools such as SAST, DAST, SCA, container scanning, and IaC scanning into CI/CD pipelines.
• Conduct security reviews of infrastructure, architecture, and deployment configurations.
• Automate security processes and compliance checks wherever possible.
• Maintain documentation related to security architecture, policies, configurations, and incident response.

Qualifications

• Bachelor‘s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 3–7 years of experience in Cloud Security, DevSecOps, DevOps, or related roles.
• Strong hands-on experience with AWS cloud infrastructure and security.
• Strong understanding of Kubernetes and container security.
• Proficiency with Linux and networking fundamentals.
• Strong experience with Infrastructure as Code, preferably Terraform.
• Hands-on experience with CI/CD platforms such as Jenkins, GitHub Actions, GitLab CI, or AWS CodePipeline.
• Good understanding of Docker/containerization.
• Strong understanding of
• VPC & network security
• Security groups & NACLs
• Encryption & key management
• Secrets management
• Logging & monitoring
• Vulnerability management
• Identity and access controls
• Strong scripting/automation skills using Python, Bash, or similar.
• Kubernetes Security Skills
• Candidates should have practical knowledge of:
• Kubernetes RBAC
• Network Policies
• Pod Security Standards
• Kubernetes Secrets
• Service Accounts
• Ingress security
• Container image security
• Resource limits and security contexts
• Admission controllers/policies
• Cluster and workload monitoring
• Kubernetes vulnerability management