Senior DevSecOps Engineer

Cloud Infrastructure & Reliability

• Own the design, operation, and scaling of production infrastructure on AWS and GCP.
• Build highly available, fault-tolerant systems with clear SLOs, backups, and disaster recovery.
• Manage infrastructure as code and keep environments consistent and reproducible.
• Plan capacity and optimize cloud spend as usage grows.

CI/CD & Automation

• Design and maintain secure CI/CD pipelines and deployment workflows.
• Automate infrastructure provisioning, configuration, releases, and rollbacks.
• Reduce deployment risk and lead time without compromising security.

Containers & Platform

• Run and harden Docker and Kubernetes workloads in production.
• Define standards for cluster security, networking, secrets management, and access control.
• Support engineering teams with reliable, secure platform tooling.

Application & Infrastructure Security

• Drive security across the SDLC, including code scanning, dependency and container image scanning, and secrets detection.
• Own vulnerability management and ensure findings from VAPT, source code reviews, and audits are remediated on time.
• Implement and review IAM, network segmentation, encryption, and least-privilege access.
• Perform threat modelling and security reviews for new features and architecture changes.

Compliance & Governance

• Maintain and improve our security posture against frameworks such as ISO 27001 and SOC 2.
• Support data protection and localization requirements, including DPDP Act obligations.
• Contribute to security questionnaires, due diligence, and audits from BFSI and fintech customers.
• Maintain policies, evidence, and runbooks so we are always audit-ready.

Monitoring & Incident Response

• Build observability across logs, metrics, traces, and alerts for production systems.
• Lead incident response, from detection and containment to root cause analysis and prevention.
• Run regular security drills, access reviews, and BCP/DR exercises.

Collaboration & Leadership

• Partner with engineering, product, and leadership to balance speed, reliability, and security.
• Set DevSecOps standards and best practices, and mentor engineers on secure development.
• Communicate risks and trade-offs clearly to technical and non-technical stakeholders.

Experience

• 7+ years of experience in DevOps, SRE, DevSecOps, or infrastructure and security engineering.
• Proven experience managing infrastructure and security at scale in a high-growth product company, preferably from companies like Razorpay, Pine Labs, Mixpanel, CleverTap, MoEngage, or similar organizations.
• Experience owning production systems end to end, including reliability, security, and incident response.
• Experience working in fast-paced environments with significant technical ownership.

Technical Skills

• Deep hands-on experience with cloud platforms, with AWS strongly preferred and GCP a plus.
• Strong experience with Docker and Kubernetes in production.
• Experience with infrastructure as code (Terraform or similar) and configuration management.
• Strong experience building CI/CD pipelines (GitHub Actions, Jenkins, ArgoCD, or similar).
• Strong understanding of application, cloud, and network security, including IAM, encryption, secrets management, and the OWASP Top 10.
• Experience with vulnerability management, VAPT remediation, and security scanning tools.
• Experience with monitoring and observability tools (Prometheus, Grafana, ELK, or similar).
• Strong Linux fundamentals and scripting skills (Python, Bash).

Leadership & Communication

• High ownership and strong judgment when making decisions under pressure.
• Clear communicator who can work with engineers, leadership, auditors, and customer security teams.
• Ability to set standards and guide others without slowing teams down.

Education

• Degree in Computer Science, IT, or a related field.

Preferred Qualifications

Experience with any of the following will be highly valued:

• Compliance frameworks such as ISO 27001, SOC 2, or PCI DSS.
• Building security and infrastructure for BFSI, fintech, or other regulated industries.
• Data localization, DPDP, or similar privacy and data protection requirements.
• Supporting AI/ML workloads, including model serving, GPU infrastructure, or low-latency real-time systems.
• Security or cloud certifications such as AWS Security Specialty, CKA/CKS, or CISSP.
• Building a DevSecOps function or practice from the ground up.

Success in This Role

You'll be successful if you:

• Keep production systems highly available, secure, and well monitored.
• Make deployments faster, safer, and fully automated.
• Close security findings quickly and prevent repeat issues.
• Keep RevRag AI audit-ready and make customer security reviews smooth.
• Keep cloud costs scaling sensibly with usage and revenue.
• Build a strong security-first engineering culture.