About the role
Role Purpose:
The Cloud DevSecOps Engineer is responsible for designing, implementing, and securing cloud-based infrastructure and CI/CD pipelines. The role ensures seamless automation, robust security integration, and efficient monitoring of systems across OCI and GCP environments to enable secure, scalable, and high-performing applications.
Key Responsibilities:
1. CI/CD Pipeline & DevSecOps
* Design, build, and secure CI/CD pipelines using GitHub Actions.
* Integrate automated security testing (SAST/DAST) using SonarQube and related tools. * Implement and manage GitOps workflows for continuous delivery using ArgoCD.
2. Cloud Infrastructure & Automation
* Design, build, and secure cloud infrastructure on OCI and GCP using Terraform. * Automate configuration and security hardening tasks using Ansible. * Develop and maintain automation scripts and perform system administration using Bash. * Secure and manage container orchestration platforms including Oracle Kubernetes Engine (OKE) and Google Kubernetes Engine (GKE).
3. QA Automation Enablement
* Collaborate with the QA team to integrate automated test suites into CI/CD pipelines. * Enable automated execution of QA tests to act as quality gates before deployment.
4. Observability & Monitoring
* Build and manage the enterprise observability and monitoring stack using Splunk, Grafana, and Prometheus. * Develop dashboards, alerts, and incident response playbooks for performance and security monitoring.
Key Interactions:
* Internal: Infrastructure, Developers, Security Teams * External: Technology vendors and solution partners (as needed)
Requirements
Education
* Bachelor’s degree in Computer Engineering, Information Technology, or a related field (preferred).
Experience
* 3+ years of hands-on experience in DevOps or Cloud Engineering. * Proven expertise in DevSecOps principles and Software Development Lifecycle (SDLC). * Strong proficiency in Bash scripting and automation with Ansible. * Deep understanding of cloud security architecture and native security services on OCI and GCP. * Extensive experience with Infrastructure as Code (Terraform). * Advanced skills in CI/CD design using GitHub Actions and GitOps tools like ArgoCD. * Hands-on experience in Kubernetes (OKE/GKE) setup and security. * Practical experience with security scanning tools (SonarQube, SAST, DAST). * Strong knowledge of observability platforms (Splunk, Grafana, Prometheus). * Familiarity with automated functional testing frameworks and integration into DevOps pipelines.
Core Competencies:
* Strong analytical and problem-solving skills. * Attention to detail and focus on security best practices. * Ability to collaborate effectively across cross-functional teams. * Excellent communication and documentation skills. * Continuous learning mindset and adaptability to new technologies.
Originally posted on Himalayas