DevSecOps Engineer

Strong Product Security Engineer / Security Engineer / Application Security Engineer / DevSecOps Engineer profiles

2

Mandatory (Experience 1) – Must have minimum 4+ years of hands-on Application/Product Security or Security Engineering experience,

3

Mandatory (Experience 2) – Strong hands-on experience in AWS Cloud Security, Infrastructure Security, and Application Security, with the ability to identify and address security risks at the application/code level.

4

Mandatory (Experience 3) – Must have hands-on experience in secure SDLC/DevSecOps, including code review, API security, CI/CD security automation, vulnerability management, VAPT/penetration testing, and security tooling.

5

Mandatory (Experience 4) – Must have hands-on experience with security audits and compliance frameworks, including SOC 2, GDPR, and ISO 27001, preferably having participated in or driven audits.

6

Mandatory (Experience 5) – Experience setting up, managing, and tracking security tools such as MDM, endpoint agents, security monitoring/scanning tools, secrets/access management, and related security tooling.

7

Mandatory (Experience 6) – Must demonstrate strong coding/development understanding with the ability to read/write code and assess security of APIs, applications, databases, and distributed systems; not just operate security tools.

8

Preferred (Experience 1) – Relevant security certifications such as CISSP, CEH, OSCP, or equivalent.

Key Responsibilities

• Automate application deployments from Bitbucket to servers using CI/CD pipelines.
• Design and manage scalable, highly available AWS infrastructure.
• Implement Auto Scaling, ELB, and Route 53 for traffic management and high availability.
• Work with AWS services including IAM, RDS, DynamoDB, EC2, and other cloud services.
• Build and manage Docker containers and server images.
• Deploy and manage applications using Kubernetes.
• Implement Infrastructure as Code using Terraform, CloudFormation, or Ansible.
• Develop automation scripts using Python and Bash.
• Implement monitoring and logging using tools such as Prometheus, Grafana, and ELK.
• Integrate security and compliance practices into CI/CD pipelines.
• Optimize infrastructure for security, scalability, performance, and cost.

Required Skills

• 3+ years of experience in DevOps or a similar role.
• Strong knowledge of AWS beyond EC2.
• Hands-on experience with Jenkins or similar CI/CD tools.
• Experience with Docker and Kubernetes.
• Good understanding of Terraform/IaC and automation.
• Proficiency in Python and/or Bash scripting.
• Knowledge of DevSecOps, security, and compliance best practices.
• Strong troubleshooting and problem-solving skills.

About the Role

The non-negotiable is deep, hands-on infrastructure expertise spanning hybrid cloud and self-hosted systems. You will architect and maintain our unique infrastructure combining AWS CDN, bare metal servers, and Kubernetes clusters. This is not just maintenance work: you will establish company-wide DevOps policy, build security-hardened environments, and create the documentation and processes that scale with us. You will design our CI/CD pipelines, implement zero-trust networking, and guide the technical team on how to keep our production systems robustly online. This role is hands-on, autonomous, and sets the standard for how we approach infrastructure as the company grows.

What You'll Build

•  Hybrid Infrastructure Management: Architect and maintain our unique infrastructure spanning AWS CDN, bare metal servers, and Kubernetes clusters for computationally intensive facial analysis workloads.
• CI/CD Pipeline Architecture: Design and implement CircleCI or Jenkins pipelines with comprehensive build testing, versioning, and change logging.
• Zero-Trust Networking: Build and maintain mesh topology networks using Tailscale or Wireguard to securely connect our hybrid infrastructure.
• Security-First Culture: Establish and enforce security policies including key rotation, access controls, compliance frameworks, and employee security management.
• Infrastructure as Code: Document and codify all infrastructure decisions, creating repeatable, auditable deployments.
• Containerization Strategy: Implement and optimize Docker/K8s deployments for our AI/ML workloads.
• Cost Optimization: Continue our approach of strategic compute placement using owned, rented or borrowed infrastructure where it makes financial sense without sacrificing security or reliability.
• Observability & Monitoring: Implement comprehensive logging, monitoring, and alerting across our distributed systems.

What We're Looking For

•  5+ years of DevOps or infrastructure engineering experience, with a track record of building from scratch
• Hybrid infrastructure expertise: experience managing both cloud (AWS) and self-hosted infrastructure, understanding the tradeoffs and security risks of each
• Kubernetes production experience: deep knowledge of cluster design, operations, and scaling
• Networking mastery: strong understanding of VPCs, mesh networks, VPNs, and zero-trust architectures
• Security-first mindset: experience with security compliance, key management, IAM policies, and hardening production systems
• CI/CD expertise: hands-on experience building robust pipelines for build testing before deployment
• Infrastructure as Code: proficiency with Terraform, Ansible, or similar tools
• Scripting and automation: strong Python, Bash, or Go skills for tooling and automation
• Policy and documentation: ability to establish best practices and document them clearly for team adoption
• Leadership mentality: comfortable setting standards and directing technical decisions, not just executing them

Nice to Have

• Experience architecting infrastructure for AI/ML workloads
• Background in a fast-moving startup or scale-up environment
• H ands-on experience with cost optimization across cloud and on-premises infrastructure

Why Join

• Opportunity to solve real healthcare problems with cutting-edge technology
• Well-funded startup with a strong market presence
• Work with advanced AI technology in a healthcare context
• Collaborate with a talented team in a fast-paced environment
• Competitive salary with equity options
• Performance and quarterly bonuses
• Professional development opportunities

Compensation and Logistics

• Remote, full-time
• Reports to: Head of Engineering
• Compensation: $1,000–$3,000 USD/month, depending on experience and technical expertise.

Job Description:

• Infrastructure Management: Design, implement, and manage scalable, reliable, and secure cloud infrastructure using AWS, GCP, and/or Azure.
• CI/CD Pipelines: Develop and maintain continuous integration and continuous deployment (CI/CD) pipelines to streamline the development lifecycle.
• Automation: Automate infrastructure provisioning, configuration management, and application deployment processes.
• Monitoring and Performance: Implement monitoring, logging, and alerting solutions to ensure system health, performance, and reliability.
• Security: Ensure the security of cloud infrastructure and applications, including identity management and compliance with industry standards.
• Collaboration: Work closely with client and development teams to integrate DevOps practices and deliver high-quality software.
• Documentation: Maintain comprehensive documentation of infrastructure, configurations, and processes.
• Innovation: Stay current with emerging technologies and industry trends, integrating them into the DevOps strategy as appropriate.

Qualifications: 

• Education: Bachelor's degree in Computer Science, Information Technology, or a related field.
• Experience: 7 - 10 years of overall experience with relevant experience of at least 7 years in DevOps and served as a lead or senior engineer.

Hi Folks, we are currently Hiring for Security Engineer.

Gemini said

Hiring: Security Engineer

Company : Pentabay Softwares

Location : Anna salai, Mount Road

Mode: Fulltime

Pentabay Softwares INC is looking for a proactive Security Engineer (2–7 Years Exp) to fortify our global digital solutions. As we scale our footprint in the Healthcare IT sector, you will play a critical role in safeguarding sensitive data (ePHI) and ensuring our cloud-native architectures are resilient against evolving threats.

The Mission

You will be the architect of our defense, bridging the gap between high-speed development and rigorous security standards. Your day-to-day will involve "shifting security left" by embedding DevSecOps practices into our CI/CD pipelines and leading our compliance efforts for SOC 2, ISO 27001, and HIPAA.

Key Responsibilities

Defense & Architecture: Design and maintain secure cloud (AWS/Azure/GCP) and on-prem environments. Implement IAM policies, Zero Trust frameworks, and robust secrets management.

Offensive Testing: Conduct regular vulnerability assessments (VAPT), penetration testing, and code reviews using tools like Burp Suite and Nessus.

DevSecOps & Automation: Integrate SAST/DAST/SCA scanning into engineering workflows. Automate security tasks using Python or Bash.

Incident Response: Monitor SIEM tools (Splunk/CrowdStrike), respond to threats, and develop risk mitigation strategies.

Healthcare Compliance (Plus): Ensure data integrity for HL7/FHIR APIs and maintain HIPAA/HITECH audit readiness for healthcare clients.

What You Bring

Experience: 2–7 years in Information/Application Security with a strong grasp of the OWASP Top 10 and threat modeling (STRIDE).

Technical Depth: Proficiency in network/endpoint security, PKI, encryption standards (TLS/SSL), and container security (Docker/Kubernetes).

Compliance Knowledge: Familiarity with NIST, GDPR, and SOC 2 frameworks.

Tools: Hands-on experience with Metasploit, Wireshark, and Infrastructure-as-Code (Terraform).

Bonus Points: Industry certifications like OSCP, CISSP, or CEH, and experience in Healthcare IT workflows.

Auditing space like ISO27001 , ISO9001 prefered

Why Pentabay?

At Pentabay, we offer more than just a job; we offer a security-first engineering culture.

Growth: A dedicated learning budget for certifications and conferences.

Impact: Work on cutting-edge Healthcare projects that demand the highest levels of data privacy.

Send resumes to : sandhiya.m at pentabay.com

Company Description

Appiness Interactive Pvt. Ltd. is a Bangalore-based product development and UX firm that specializes in digital services for startups to fortune-500s. We work closely with our clients to create a comprehensive soul for their brand in the online world, engaged through multiple platforms of digital media. Our team is young, passionate, and aggressive, not afraid to think out of the box or tread the un-trodden path in order to deliver the best results for our clients. We pride ourselves on Practical Creativity where the idea is only as good as the returns it fetches for our clients.

Role Overview

We are looking for an experienced Senior Cloud Security Engineer with 7+ years of experience, including strong hands-on expertise in AWS Cloud Security. The candidate will be responsible for designing, implementing, assessing, and continuously improving security across AWS cloud environments. The role requires strong knowledge of cloud security architecture, IAM, network security, threat detection, vulnerability management, incident response, security monitoring, encryption, and DevSecOps.

This is a highly technical position. Hands-on technical expertise will be given significantly more importance than communication skills. Good written and verbal communication is sufficient.

Key Responsibilities

• Design and implement secure AWS cloud architectures.
• Establish and maintain AWS security best practices and security controls.
• Implement IAM, RBAC, least-privilege access, MFA, federation and privileged access controls.
• Secure AWS networking including VPCs, Security Groups, NACLs, routing, private/public subnets and VPC endpoints.
• Implement and manage AWS security services including:
• AWS IAM
• AWS KMS
• AWS CloudTrail
• Amazon GuardDuty
• AWS Security Hub
• AWS Config
• AWS WAF
• AWS Secrets Manager
• Monitor and investigate security events, threats and suspicious activities.
• Lead or participate in cloud security incident response and root-cause analysis.
• Conduct vulnerability assessments and coordinate remediation.
• Perform AWS security posture reviews and identify misconfigurations.
• Review cloud architectures and provide security recommendations.
• Implement encryption and data protection controls.
• Secure CI/CD pipelines and support DevSecOps practices.
• Review Infrastructure as Code for security risks.
• Implement security automation wherever possible.
• Work with engineering, DevOps and infrastructure teams to embed security into the development lifecycle.
• Establish security standards, policies and controls for AWS environments.
• Support compliance requirements and security audits.
• Mentor junior engineers and provide technical guidance.

Mandatory Technical Skills

Must Have

• 7+ years of overall IT/Security/Cloud experience
• Strong AWS Cloud Security experience
• Hands-on AWS security architecture
• AWS IAM
• IAM policies, roles, permissions and least privilege
• AWS networking security
• VPC, Security Groups and NACLs
• CloudTrail and security logging
• GuardDuty
• Security Hub
• KMS and encryption
• Vulnerability management
• Cloud security monitoring
• Incident response
• Security hardening
• Security architecture/design

Good to Have

• AWS Organizations / SCP
• Terraform / CloudFormation
• DevSecOps
• CI/CD security
• Docker/Kubernetes security
• SAST/DAST/SCA
• SIEM tools
• Python/Bash/PowerShell scripting
• CIS Benchmarks
• NIST
• ISO 27001
• SOC 2
• AWS security certifications

Job Title : DevOps Engineer – Linux, AWS & Infrastructure

Experience : 3+ Years

Location : Sector 48, Gurgaon

Work Mode : 6 Days WFO – Monday to Saturday

Week Off : 01st & 03rd Saturday Off

Employment Type : Full-Time

Job Summary :

We are looking for a DevOps Engineer with strong hands-on experience in Linux, Networking, Server Administration, AWS, CI/CD, Containers, Kubernetes, and Infrastructure Automation. The ideal candidate should have strong troubleshooting skills, production ownership, and the ability to manage and automate infrastructure reliably.

Key Responsibilities :

• Manage and troubleshoot Linux servers, bare-metal infrastructure, and server environments.
• Perform system administration, networking, performance monitoring, and production troubleshooting.
• Design, maintain, and optimize Jenkins-based CI/CD pipelines and deployment workflows.
• Manage Docker containers and Kubernetes environments.
• Work with AWS Cloud services, infrastructure, security, and deployment environments.
• Monitor system health, application performance, logs, and infrastructure using appropriate monitoring and logging tools.
• Implement and maintain Infrastructure as Code (IaC) using tools such as Terraform or CloudFormation.
• Automate repetitive operational tasks using Python, Bash, Shell scripting, or similar technologies.
• Implement infrastructure and application security, access controls, patching, and hardening.
• Investigate production incidents, perform root-cause analysis (RCA), and drive issues to resolution.
• Take end-to-end ownership of infrastructure reliability, availability, and operational issues.
• Collaborate with development and other engineering teams to improve deployment, scalability, and system reliability.

Mandatory Skills :

Linux & Networking | Bare Metal / Server Administration | Jenkins / CI-CD | Docker / Containers | AWS Cloud | Kubernetes | Git | Monitoring & Logging | Security | Infrastructure as Code (IaC) | Automation / Scripting | Production Troubleshooting & Ownership

Preferred Skills :

• Strong understanding of TCP/IP, DNS, HTTP/HTTPS, SSH, load balancing, and networking fundamentals.
• Hands-on experience with Terraform / CloudFormation.
• Experience with Prometheus, Grafana, ELK / EFK, CloudWatch, or similar monitoring / logging tools.
• Good understanding of Linux performance troubleshooting, processes, memory, disk, networking, and file systems.
• Experience handling production incidents, RCA, deployments, and system reliability.
• Exposure to cloud security, IAM, secrets management, and server hardening.

What We’re Looking For :

• 3+ years of hands-on experience in DevOps / SRE / Infrastructure Engineering.
• Strong practical knowledge rather than certification-based/theoretical understanding.
• Good troubleshooting and analytical skills.
• Strong sense of ownership and accountability for production systems.
• Comfortable working in a 6-day work-from-office environment.

About the Role

We are looking for an experienced AWS DevOps Engineer with around 4 years of hands-on experience to join our infrastructure/DevOps team. The ideal candidate will independently design, deploy, and maintain cloud infrastructure primarily on AWS, drive automation initiatives, mentor junior engineers, and work closely with cross-functional teams to build scalable, secure, and highly available systems. Exposure to Azure is a strong plus.

Key Responsibilities

·      Design, deploy, and maintain robust, scalable, and secure infrastructure on AWS

·      Architect and manage core AWS services such as EC2, S3, VPC, IAM, RDS, Lambda, ECS/EKS, Route 53, and CloudFront

·      Build, own, and optimize CI/CD pipelines (e.g., CodePipeline, Jenkins, GitLab CI, GitHub Actions) to enable fast and reliable deployments

·      Design and implement Infrastructure as Code (IaC) using Terraform / AWS CloudFormation

·      Set up and manage monitoring, logging, and alerting solutions (CloudWatch, ELK, Prometheus, Grafana, Datadog, etc.)

·      Implement and enforce security best practices including IAM policies, security groups, NACLs, KMS, Secrets Manager, and compliance standards

·      Lead troubleshooting and root cause analysis for infrastructure, deployment, and production incidents

·      Drive backup, disaster recovery, high-availability, and cost-optimization strategies (Reserved Instances, Savings Plans, right-sizing)

·      Containerize applications and manage orchestration using Docker, ECS, and/or Kubernetes (EKS)

·      Automate repetitive operational tasks through scripting and tooling

·      Support any hybrid or multi-cloud initiatives involving Azure services, where applicable

·      Mentor junior engineers and review their work, providing technical guidance

·      Collaborate with development, QA, security, and product teams to support and streamline application deployments

·      Maintain comprehensive documentation of architecture, configurations, processes, and runbooks

·      Participate in on-call rotations and incident response as needed

Required Skills & Qualifications

·      Bachelor's degree in Computer Science, IT, or a related field (or equivalent practical experience)

·      4+ years of hands-on experience working with AWS cloud services in a production environment

·      Strong expertise in core AWS services: EC2, S3, VPC, IAM, RDS, Lambda, CloudWatch, ECS/EKS, Route 53, ELB/ALB, Auto Scaling

·      Solid understanding of networking concepts (subnets, routing, security groups, load balancers, VPNs, VPC peering, Direct Connect)

·      Strong scripting/programming skills in Python, Bash, or PowerShell for automation

·      Hands-on experience with Infrastructure as Code tools such as Terraform or AWS CloudFormation

·      Proven experience with Linux and/or Windows server administration

·      Strong understanding of CI/CD pipelines, Git-based version control, and branching strategies

·      Solid experience with containerization and orchestration (Docker, ECS, or EKS/Kubernetes)

·      Experience with configuration management tools (Ansible, Chef, or Puppet) is a plus

·      Application Server Management — strong knowledge of networking, firewalls, load balancers, Nginx, Apache, etc.

·      Ability to independently read, interpret AWS documentation, and troubleshoot complex issues

·      Experience with cost optimization, security audits, and compliance frameworks (e.g., ISO, SOC2) is a plus

·      AWS certification (Solutions Architect Associate/Professional, DevOps Engineer Professional) preferred

Good to Have

·      Working knowledge of Microsoft Azure services (Virtual Machines, VNets, Azure DevOps, Azure Storage, Azure AD/Entra ID, AKS)

·      Experience with multi-cloud or hybrid-cloud environments

·      Familiarity with Azure Resource Manager (ARM) templates or Bicep

·      Any Azure certification (AZ-104, AZ-400, etc.)

Soft Skills

·      Strong analytical, problem-solving, and decision-making ability

·      Excellent verbal and written communication skills

·      Ability to mentor and guide junior team members

·      Proactive, ownership-driven approach to infrastructure and incident management

·      Strong collaboration skills in a cross-functional, team-oriented environment

·      High attention to detail with a focus on reliability and scalability

Location: Bangalore preferred / Hybrid as applicable

Experience: 3+ years

Education: B.E/B.Tech in Computer Science, Engineering or a related technical discipline

Salary: Above market standards, flexible for the right candidate

Career growth: Long-term opportunity with potential to lead DevOps architecture and cloud platform operations

About FrontM

FrontM builds software platforms for frontline workforces operating in remote and low-connectivity environments, with a strong focus on the maritime industry. The platform supports communication, collaboration, healthcare, learning, welfare and operational workflows across mobile, web, kiosk and connected device environments.

The platform runs across cloud infrastructure, constrained networks and specialised customer environments, requiring reliable DevOps practices, strong observability, secure architecture and careful operational discipline.

Role Summary

As a Senior DevOps Engineer, you will take ownership of FrontM’s AWS cloud infrastructure, CI/CD pipelines, platform reliability and technical operations. You will work closely with the VP of Delivery, CTO and CEO to maintain secure, scalable and high-availability infrastructure for FrontM’s production systems.

This role requires strong hands-on DevOps experience, broad AWS knowledge, Kubernetes experience and the ability to troubleshoot complex networking and production issues across multi-domain SaaS environments.

Key Responsibilities

Cloud Infrastructure & DevOps Architecture (≈45%)

· Own, maintain and improve AWS cloud infrastructure for FrontM platforms

· Create and maintain Terraform scripts for infrastructure deployment and management

· Manage Kubernetes workloads deployed within AWS EKS

· Support multi-zone AWS infrastructure design for availability, resilience and scale

· Maintain AWS services including Route 53, EC2, API Gateway, VPC, VPN, AWS Cognito, ElastiCache, DynamoDB and Lambda

· Contribute to DevOps architecture planning in line with FrontM’s platform roadmap

CI/CD, Operations & Platform Reliability (≈35%)

· Build, maintain and improve CI/CD pipelines for backend and platform services

· Oversee technical operations with hands-on administration, monitoring and release support

· Ensure continuous server uptime, stability, performance and maintainability

· Debug, respond to and restore system outages in production and staging environments

· Improve observability across infrastructure and applications, including migration from Elastic stack to logz.io

· Support backend stability, scale and performance across Node.js, Java and related services

Security, Networking & Production Support (≈20%)

· Maintain AWS security configurations, access controls and monitoring practices

· Support complex networking requirements across multi-domain SaaS implementations

· Troubleshoot network, infrastructure and access issues with internal teams and customer-side users

· Work with backend teams to support API integrations and infrastructure abstractions for complex requirements

· Document operational procedures, incident findings and technical support steps clearly

Required Technical Skills

Cloud Infrastructure & AWS

· Strong hands-on experience with AWS infrastructure and cloud operations

· Experience with Route 53, EC2, API Gateway, VPC, VPN, AWS Cognito, ElastiCache, DynamoDB and Lambda

· Experience with AWS security setup, monitoring and multi-zone infrastructure

· Ability to manage infrastructure using Terraform

Kubernetes, CI/CD & Observability

· Strong experience with Kubernetes, preferably AWS EKS

· Extensive CI/CD and DevOps experience

· Experience with infrastructure observability and application monitoring tools

· Ability to diagnose production bottlenecks, server failures and performance issues

Backend, Networking & SaaS Operations

· Experience supporting Node.js, Java and backend system procedures for stability and scale

· Good understanding of APIs, integrations and backend service dependencies

· Experience with complex networking and multi-domain SaaS implementations

· Ability to troubleshoot technical issues with non-technical end users

Nice to Have

· Experience with MongoDB clusters in MongoDB Atlas

Personal Attributes

· Strong ownership mindset for uptime, reliability and production stability

· Practical problem-solving approach with the ability to act quickly during incidents

· Clear written and spoken communication in English

· Ability to work independently and coordinate with senior management when required

· Comfortable working in fast-moving engineering teams

· Attention to detail in security, monitoring, documentation and operational processes

Why join FrontM?

Long-Term Career Growth

Opportunity to work on cloud infrastructure used by global maritime and remote workforce customers, with scope to grow into DevOps architecture and platform leadership roles.

Engineering Challenges That Matter

Work on infrastructure that supports applications used in remote, low-bandwidth and operationally demanding environments.

Broad Technical Ownership

Take responsibility across cloud infrastructure, Kubernetes, CI/CD, observability, networking, security and production reliability.

Apply now

Join a team focused on building reliable software infrastructure for real-world use cases and contribute to systems used across the global maritime workforce.

Location : Mumbai

Big Picture (The Opportunity) :

Are you looking for an opportunity to advance your Career? & If you are able to maintain a positive attitude even when everything goes wrong, if you are detail oriented and self motivated with a passion to learn and improve your skills and knowledge, we have a perfect job for you !

What do we want from you ? (Our Expectations) :

• Zero to 2 years experience in Linux Operating System.
• Flexible working hours - able to support occasional nights, weekends, and call-ins, able to quickly adapt to a constantly changing faced paced environment. Open to travel to sites.
• An ideal person who is excited and motivated about running and supporting a production - grade critical infrastructure and looks for opportunities to improve processes with automation.

What are you required to do ? (Your Responsibilities) :

• Proactively maintain and develop all linux infrastructure technology to maintain a 24*7*365 uptime service.
• Engineering of systems administration-related various solutions for our various SAAS products and projects as well as operational needs.
• Proactively monitoring system performance and capacity planning.
• Providing technical support to customers for Applications, Operating systems, and networking.
• Will also be the first point of contact for our clients, where installations are placed on a permanent basis, for basic troubleshooting and problem solving.
• Fault finding, analysis and logging information for reporting of performance exceptions.
• Maintain best practices on managing systems and services across all environments.

Skills & Qualification Required (Add Value) :

• Graduate - Preferred to have Bachelor‘s Degree in Engineering, Computer Science or related field.
• He / She should be familiar with the installation and configuration of Linux operating systems and setup and operation of TCP/IP networking on Linux systems also familiar with Internet concepts including SMTP, IMAP, POP, HTTP, DNS, LDAP and related protocols.
• You should possess excellent communication skills .
• Knowledge of Email concepts, Helpdesk Concept , VoIP Concept , Cloud computing will be an added advantage.