We are seeking a highly skilled DevSecOps Engineer to embed security across the DevOps lifecycle in multi-cloud environments. The ideal candidate will have strong hands-on experience with Infrastructure as Code, Policy as Code, cloud security controls, and serverless development, ensuring secure, compliant, and scalable cloud platforms.
Requirements
- Integrate security into CI/CD pipelines across multi-cloud environments
- Design, develop, and maintain Infrastructure as Code (IaC) using Terraform and CloudFormation
- Implement Policy as Code and governance controls across AWS, Azure, and OCI
- Write and manage cloud security policies including AWS IAM Policies, SCPs, Resource Policies, Azure RBAC, Azure Policies, Blueprints, OCI IAM Policies and Compartments
- Develop and maintain serverless functions: AWS Lambda, Azure Functions, OCI Functions
- Automate security controls, compliance checks, and remediation workflows
- Integrate security tools (SAST, DAST, SCA, container and IaC scanning) into pipelines
- Monitor cloud environments for security risks and vulnerabilities
- Collaborate with DevOps, Cloud, and Security teams to design secure architectures
- Support compliance with industry standards and regulatory requirements