Sr. Azure DevSecOps Engg.

Key Responsibilities

• Design and maintain CI/CD pipelines for applications and databases using tools such as Azure DevOps, Jenkins, Smart City, GitLab CI, or GitHub Actions.
• Automate infrastructure provisioning and configuration management using tools like Terraform, Ansible, or Helm.
• Integrate automated testing frameworks (JUnit, Selenium etc) and code coverage tools (e.g., SonarQube etc).
• Embed static and dynamic security scanning tools (SAST/DAST) into pipelines.
• Implement and monitor database CI/CD workflows for version-controlled schema migrations.
• Ensure secure secrets management using Azure Key Vault.
• Continuously monitor pipeline performance and enforce compliance, code quality, and security policies.
• Collaborate with application and database developers to optimize release strategies and rollback mechanisms.
• Conduct incident response drills, threat modeling, and vulnerability assessments within CI/CD contexts.
• Document DevSecOps processes and provide training to development teams on security and best practices.

Required Skills & Experience

• Proven experience with DevSecOps practices and tools.
• Solid understanding of cloud platforms (Azure, ).
• Experience with IaC tools like Terraform, CloudFormation.
• Strong background in code testing frameworks and code quality tooling (JUnit, SonarQube, etc.).
• Hands-on with database CI/CD, schema versioning, and database migration practices.
• Experience with containerization (Docker) and orchestration (Kubernetes, AKS).
• Familiarity with secure coding principles and compliance standards.
• Strong scripting skills in Python, Bash.

Preferred Qualifications

• Certifications: Azure DevOps Engineer.
• Experience with monitoring and observability tools.
• Experience in multi-cloud or hybrid-cloud DevSecOps pipelines.
• Familiarity with data masking, auditing, and encryption in the database CI/CD context.