DevSecOps Engineer

You will help teams move from fragile or inconsistent delivery practices toward a controlled operating model. Depending on the assignment, that can include reviewing cloud environments, strengthening deployment pipelines, clarifying access boundaries, improving secrets handling, establishing useful monitoring, and making rollback or recovery procedures credible.

Some environments will already have established infrastructure and strong constraints. Others will be early-stage products that need sensible foundations before traffic, customer expectations, or regulatory obligations increase. In both cases, the goal is proportionate control. We do not add complexity merely to make a platform look sophisticated.

• Review delivery pipelines, environments, permissions, dependencies, and operational risks.
• Improve build, test, deployment, rollback, and release-verification practices.
• Establish practical security guardrails around access, secrets, workloads, and changes.
• Help teams build monitoring and alerting that supports decisions rather than creating noise.
• Document infrastructure choices, operating procedures, recovery steps, and ownership.
• Work with product engineers and technical leaders to resolve reliability and security issues.
• Surface material risks clearly and propose staged improvements that teams can operate.

You should have hands-on experience with production cloud infrastructure, automated delivery, containerized workloads, infrastructure as code, and security-conscious operations. We care less about matching a fixed vendor list than about understanding why a control exists and what can fail when it is missing.

Strong candidates can explain an incident or difficult release without hiding behind jargon. They understand the difference between a temporary workaround and an operating decision. They can work carefully with existing systems, verify assumptions before changing them, and collaborate with developers who may not specialize in infrastructure.

Experience with AWS, Azure, Google Cloud, Kubernetes, Terraform or comparable tools is useful. Familiarity with identity and access management, vulnerability management, software supply-chain controls, logging, incident response, and recovery planning will strengthen an application.

Success means releases become more understandable, failures become easier to diagnose, responsibilities become clearer, and security controls fit the way the team actually works. It also means internal contributors can maintain what was introduced. A technically impressive platform that no one can safely operate is not a successful outcome.

This opening is remote within India and is currently structured as contract work, with the possibility of continuing assignments based on delivery needs and mutual fit. Availability across agreed collaboration hours may be required for client or team coordination. Compensation is discussed according to experience, responsibility, availability, and engagement shape.

Use the application form below to share a resume link, relevant profile, current availability, and examples of delivery or security work you personally owned.