Role Purpose:
The Cloud DevSecOps Engineer is responsible for designing, implementing, and securing cloud-based infrastructure and CI/CD pipelines. The role ensures seamless automation, robust security integration, and efficient monitoring of systems across OCI and GCP environments to enable secure, scalable, and high-performing applications.
Key Responsibilities:
1. CI/CD Pipeline & DevSecOps
- Design, build, and secure CI/CD pipelines using GitHub Actions.
- Integrate automated security testing (SAST/DAST) using SonarQube and related tools.
- Implement and manage GitOps workflows for continuous delivery using ArgoCD.
2. Cloud Infrastructure & Automation
- Design, build, and secure cloud infrastructure on OCI and GCP using Terraform.
- Automate configuration and security hardening tasks using Ansible.
- Develop and maintain automation scripts and perform system administration using Bash.
- Secure and manage container orchestration platforms including Oracle Kubernetes Engine (OKE) and Google Kubernetes Engine (GKE).
3. QA Automation Enablement
- Collaborate with the QA team to integrate automated test suites into CI/CD pipelines.
- Enable automated execution of QA tests to act as quality gates before deployment.
4. Observability & Monitoring
- Build and manage the enterprise observability and monitoring stack using Splunk, Grafana, and Prometheus.
- Develop dashboards, alerts, and incident response playbooks for performance and security monitoring.
Key Interactions:
-
Internal: Infrastructure, Developers, Security Teams
-
External: Technology vendors and solution partners (as needed)
Requirements
Education
- Bachelor’s degree in Computer Engineering, Information Technology, or a related field (preferred).
Experience
- 3+ years of hands-on experience in DevOps or Cloud Engineering.
- Proven expertise in DevSecOps principles and Software Development Lifecycle (SDLC).
- Strong proficiency in Bash scripting and automation with Ansible.
- Deep understanding of cloud security architecture and native security services on OCI and GCP.
- Extensive experience with Infrastructure as Code (Terraform).
- Advanced skills in CI/CD design using GitHub Actions and GitOps tools like ArgoCD.
- Hands-on experience in Kubernetes (OKE/GKE) setup and security.
- Practical experience with security scanning tools (SonarQube, SAST, DAST).
- Strong knowledge of observability platforms (Splunk, Grafana, Prometheus).
- Familiarity with automated functional testing frameworks and integration into DevOps pipelines.
Core Competencies:
- Strong analytical and problem-solving skills.
- Attention to detail and focus on security best practices.
- Ability to collaborate effectively across cross-functional teams.
- Excellent communication and documentation skills.
- Continuous learning mindset and adaptability to new technologies.
Originally posted on Himalayas
