DevSecOps Engineer

Hello,
Greetings from ZettaMine Labs Pvt Ltd!!
We are looking for DevSecOps Engineer – Azure DevOps with exciting project opportunities.
Job Role: DevSecOps Engineer – Azure DevOps
Location: Bangalore, Hyderabad& Chennai,Pune & Noida
Notice Period: Immediate / 15 Days
Experience: 5+ Years
Relevant Experience: Strong hands-on experience in DevSecOps, Azure DevOps, CI/CD, Infrastructure as Code, Cloud Security, Container Security, Security Automation, Vulnerability Management, and Secure SDLC.
Mandatory Skills:
5+ years of experience in DevOps, DevSecOps, Cloud Engineering, Platform Engineering, or related roles.
Strong hands-on experience with Microsoft Azure and Azure DevOps.
Strong experience designing, implementing, and managing CI/CD pipelines using Azure DevOps.
Strong understanding of DevSecOps practices and Secure SDLC.
Hands-on experience integrating security controls into CI/CD pipelines.
Strong experience with Azure Repos, Azure Pipelines, Azure Artifacts, Azure Boards, and Azure DevOps.
Strong experience with Infrastructure as Code (IaC) using Terraform, ARM templates, Bicep, or similar technologies.
Experience implementing automated SAST, SCA, DAST, secrets scanning, IaC scanning, and container security within CI/CD pipelines.
Strong understanding of cloud security principles and Azure security services.
Experience with Docker and Kubernetes / AKS and container security.
Strong understanding of identity and access management, RBAC, managed identities, service principals, and secrets management.
Experience with Azure Key Vault and secure management of credentials, certificates, and secrets.
Experience with Git-based source control, branching strategies, pull requests, code quality checks, and security gates.
Strong scripting/programming skills using PowerShell, Bash, Python, or similar technologies.
Experience with vulnerability identification, remediation tracking, security automation, and compliance controls.
Strong troubleshooting and problem-solving skills across build, release, deployment, infrastructure, and security pipelines.
Good-to-Have:
Experience with Microsoft Defender for Cloud and Microsoft Defender for DevOps.
Experience with security tools such as SonarQube, Snyk, Checkmarx, Veracode, Fortify, Semgrep, Trivy, Prisma Cloud, or similar tools.
Experience with GitHub Advanced Security and secret/dependency scanning.
Experience with Terraform Cloud / Enterprise.
Experience with Helm, Argo CD, Flux, or GitOps.
Experience securing AKS and Kubernetes workloads.
Experience with Azure Policy, Azure Monitor, Log Analytics, Application Insights, and Microsoft Sentinel.
Knowledge of OWASP Top 10, secure coding, vulnerability management, and threat modeling.
Experience implementing security quality gates and automated compliance checks.
Experience with Azure Container Registry (ACR) and container image scanning.
Knowledge of API security and microservices security.
Experience with cloud governance, security standards, and regulatory compliance.
Azure certifications such as AZ-400, AZ-500, AZ-104, or AZ-305.
Key Responsibilities:
Design, implement, and maintain secure and scalable Azure DevOps CI/CD pipelines.
Embed security controls and automation throughout the software development lifecycle.
Implement DevSecOps practices across development, testing, deployment, and production environments.
Integrate SAST, SCA, DAST, secrets detection, IaC scanning, and container security into CI/CD pipelines.
Configure and maintain Azure DevOps repositories, pipelines, artifacts, boards, security policies, and release processes.
Implement automated security gates and quality checks to prevent vulnerable code and infrastructure from progressing through the delivery lifecycle.
Build and maintain reusable CI/CD templates, pipeline components, and DevSecOps automation frameworks.
Implement Infrastructure as Code using Terraform, Bicep, ARM templates, or similar technologies.
Secure Azure infrastructure, applications, containers, Kubernetes/AKS workloads, and deployment pipelines.
Implement secure authentication, authorization, RBAC, managed identities, and secrets management.
Manage and integrate Azure Key Vault for secure credentials, secrets, certificates, and application configuration.
Implement vulnerability scanning and remediation workflows across application, infrastructure, dependency, and container layers.
Configure security and compliance controls within Azure DevOps and Azure environments.
Monitor pipeline security, deployment failures, vulnerabilities, and compliance violations.
Collaborate with Application Security, Cloud Security, Development, QA, Infrastructure, and Platform Engineering teams.
Identify security gaps in existing DevOps processes and recommend automation-driven improvements.
Implement secure branching, pull-request validation, code-review controls, and repository security standards.
Develop scripts and automation using PowerShell, Bash, Python, or similar technologies.
Support Kubernetes/AKS deployment automation and container security.
Troubleshoot complex CI/CD, deployment, infrastructure, and security issues.
Establish DevSecOps standards, reusable patterns, documentation, and best practices across engineering teams.
Continuously improve pipeline performance, security, reliability, developer experience, and operational efficiency.
Who Can Apply?
✔️ 5+ years of experience in DevOps, DevSecOps, Cloud Engineering, Platform Engineering, or related areas.
✔️ Strong hands-on experience with Azure and Azure DevOps.
✔️ Strong experience developing and managing Azure DevOps CI/CD pipelines.
✔️ Strong understanding of DevSecOps and Secure SDLC.
✔️ Experience integrating SAST, SCA, DAST, Secrets Detection, IaC Scanning, and Container Security into CI/CD pipelines.
✔️ Strong experience with Infrastructure as Code, particularly Terraform, Bicep, or ARM.
✔️ Hands-on experience with Docker, Kubernetes, and/or AKS.
✔️ Strong understanding of Azure Security, IAM, RBAC, Managed Identity, and Key Vault.
✔️ Experience implementing security gates, vulnerability scanning, and automated compliance controls.
✔️ Strong experience with Git, branching strategies, pull requests, and source-code security.
✔️ Good scripting skills in PowerShell, Bash, Python, or similar technologies.
✔️ Experience with DevSecOps/security tools such as SonarQube, Snyk, Checkmarx, Veracode, Fortify, Trivy, Semgrep, or equivalent.
✔️ Strong troubleshooting, automation, communication, collaboration, and stakeholder management skills.
Candidate Details:
Please share the following details along with your updated resume: karishma.sh@zettamine.com
Full Name:
Contact Number:
Current Location:
Total Experience:
Relevant DevSecOps Experience:
Azure Experience:
Azure DevOps Experience:
Azure DevOps CI/CD Pipeline Experience:
Azure Repos / Pipelines / Artifacts Experience:
DevSecOps / Secure SDLC Experience:
SAST Experience:
SCA / Dependency Scanning Experience:
DAST Experience:
Secrets Detection Experience:
IaC Scanning Experience:
Container Security Experience:
Terraform Experience:
Bicep / ARM Experience:
Docker Experience:
Kubernetes / AKS Experience:
Azure Key Vault Experience:
IAM / RBAC / Managed Identity Experience:
Azure Security / Defender Experience:
Git / GitHub / GitLab Experience:
Security Tools Experience:
PowerShell / Bash / Python Experience:
Vulnerability Management Experience:
OWASP / Secure Coding Experience:
CI/CD Security Automation Experience:
Current Company:
Notice Period:
Current CTC:
Expected CTC:
We look forward to connecting with you!!
Thanks and Regards,
TAG Team

Work arrangement
No