We are seeking a DevSecOps Engineer to design, implement, and operate secure, automated, and scalable CI/CD platforms on Microsoft Azure. The role is responsible for embedding security controls across the cloud, infrastructure, and application delivery lifecycle while enabling development teams to release software quickly, safely, and reliably. The ideal candidate should have strong hands-on experience in Azure cloud services, CI/CD pipelines, infrastructure automation, security engineering, and cloud governance.
Key Responsibilities:
- Design, build, and maintain CI/CD pipelines using Azure DevOps and GitHub Actions.
- Integrate security scanning, compliance checks, and policy enforcement into build and deployment pipelines.
- Automate build, test, deployment, rollback, artifact versioning, and release governance processes.
- Enable shift-left security practices across development and engineering teams.
- Design and implement secure Azure infrastructure using ARM templates, Bicep, and Terraform.
- Manage and secure Azure resources including VNETs, Subnets, NSGs, Load Balancer, Application Gateway, Private Endpoints, Storage, Key Vault, Azure SQL, and Cosmos DB.
- Support multi-environment deployments across Dev, UAT, and Production.
- Implement Infrastructure as Code security scanning, SAST, dependency scanning, and container vulnerability scanning.
- Manage secrets, certificates, keys, Managed Identities, and RBAC using Azure-native services.
- Use security tools such as Microsoft Defender for Cloud, Microsoft Sentinel, Azure Policy, and Azure Blueprints.
- Secure containerized workloads using AKS and Azure Container Registry.
- Implement image scanning, admission controls, pod security, network policies, and secrets management.
- Support runtime security, vulnerability remediation, and application security improvements.
- Implement monitoring and observability using Azure Monitor, Log Analytics, and Application Insights.
- Define and track SLIs, SLOs, error budgets, and operational reliability metrics.
- Support incident response, root cause analysis, and post-incident reviews.
- Enforce cloud governance using Azure Policy, Management Groups, and secure landing zones.
- Support internal security standards, regulatory requirements, audits, and compliance reviews.
- Work closely with application teams, security, architecture, risk, compliance, and infrastructure teams.
Required Skills and Experience:
- Minimum 5 years of IT experience, with strong exposure to Azure cloud, DevSecOps, and infrastructure engineering.
- Hands-on experience with Microsoft Azure, including networking, identity, storage, compute, and security services.
- Strong experience in CI/CD pipeline design and automation using Azure DevOps and/or GitHub Actions.
- Experience with Infrastructure as Code tools such as ARM, Bicep, Terraform, or equivalent.
- Good understanding of application security, cloud security, IAM, secrets management, and encryption best practices.
- Experience with SAST, dependency scanning, IaC scanning, container scanning, and security gates in pipelines.
- Hands-on scripting and automation experience using PowerShell, Python, Bash, or similar tools.
- Experience with Azure Monitor, Log Analytics, Application Insights, and operational troubleshooting.
- Microsoft certification AZ-400 DevOps Engineer Expert is preferred.
To apply,simply click the "Apply" button or send your updated profile to recruit@percept-solutions.com
EA Licence No.:18S9405 / EA Reg. No.:R1330864
Percept Solutions is expanding and actively seeking talented individuals. We encourage applicants to follow Percept Solutions on LinkedIn at https://www.linkedin.com/company/percept-solutions/to stay informed about new opportunities and events.