DevSecOps Manager

Key Responsibilities

• Automate security controls within CI/CD pipelines (Jenkins, GitLab, CircleCI, GitHub Actions
• Secure cloud environments (AWS, Azure, GCP) and container platforms (Docker, Kubernetes)
• Integrate security testing tools (SAST, DAST, SCA) such as Snyk, SonarQube, Checkmarx, or Fortify
• Implement Infrastructure as Code (IaC) security using Terraform and CloudFormation
• Enforce IAM best practices, RBAC, and federated identity (SAML, OAuth, Cognito)
• Apply security frameworks (ISO 27001, NIST, CIS) and compliance automation
• Perform threat modeling, risk assessments, and vulnerability management
• Secure DevOps toolchains, artifact repositories (JFrog, Nexus), and source control system
• Implement Zero Trust principles and cloud-native security controls
• Maintain audit trails, enforce policies (OPA, AWS Config), and ensure governance compliance

Technical Competencies

• Strong expertise in DevSecOps practices and secure SDLC
• Deep knowledge of cloud and container security
• Hands-on experience with IaC security and automation
• Familiarity with Kubernetes security (RBAC, network policies, secrets management)
• Proficiency in security tools and automation frameworks
• Experience with compliance-as-code tools (Chef InSpec, OpenSCAP)

Preferred Experience

• Proven experience in DevSecOps within platform engineering environments, building secure and scalable developer platforms
• Hands-on expertise with Terraform, including securing Terraform modules, state management, and IaC pipelines
• Experience designing and securing internal developer platforms (IDPs) or platform-as-a-service (PaaS) environments
• Strong background in automating security controls at scale across cloud-native architectures
• Experience with Cloud Security Posture Management (CSPM) tools such as Prisma Cloud or Dome9
• Exposure to enterprise-grade security architecture and governance frameworks