Azure Devops Engineer | Aurionpro Solutions | Rabale, Navi Mumbai

Aurionpro is an IT Product and Services based MNC which Employees more than 2,600+ domain and technology experts across North America, Asia and Europe, UAE. We help enterprises to embrace Digital Transformation across Banking, Mobility, Payments and Government sectors through a platform led approach. We are CMMI level organization and Great place to work Certified. Aurionpro caters to a host of clients across BFSI, Telecom, Digital Solutions for Government and Logistics industry. To know more about the organization you may go through the company website : - www.aurionpro.com

Job Description:

The Azure DevSecOps Engineer integrates security into the development pipeline, ensuring that applications are developed and deployed with security as a priority. The role requires expertise in DevOps practices, security tools, and automation to protect cloud applications and infrastructure from threats.

Key Responsibilities:

CI/CD Pipeline Management:

• Design, build, and maintain CI/CD pipelines using Azure DevOps, Jenkins, or GitLab.
• Integrate security checks into CI/CD pipelines, including static and dynamic code analysis, vulnerability scanning, and dependency checks.
• Implement blue-green deployments, canary releases, and rolling updates for zero-downtime deployments.

Security Integration:

• Implement DevSecOps practices, such as shift-left security, to identify and fix vulnerabilities early in the development cycle.
• Use tools like SonarQube, WhiteSource, and OWASP ZAP for continuous security scanning.
• Manage secrets and credentials securely using Azure Key Vault and integrate with CI/CD pipelines.
• Configure and manage Azure Web Application Firewall (WAF) for protecting web applications.

Infrastructure as Code (IaC):

• Develop, test, and maintain Infrastructure as Code (IaC) scripts using Terraform, ARM templates, or Bicep.
• Implement automated compliance checks and enforce security best practices in IaC scripts.
• Use Azure Policy and Sentinel for policy-as-code to enforce organizational standards.

Monitoring and Incident Response:

• Set up and configure Azure Security Center, Azure Sentinel, and third-party SIEM tools for security monitoring and incident response.
• Develop and implement incident response playbooks and automate response actions using Azure Logic Apps or Azure Automation.
• Perform regular security assessments, including penetration testing and vulnerability assessments, and remediate identified risks.

Collaboration and Documentation:

• Collaborate with development, operations, and security teams to establish DevSecOps practices and standards.
• Document security processes, CI/CD pipelines, and incident response procedures.

Qualifications:

• Bachelors degree in Computer Science, Cybersecurity, or a related field.
• 3+ years of experience in DevSecOps or a similar role, with a focus on Azure environments.
• Strong knowledge of Azure DevOps, CI/CD tools, and security scanning tools.
• Experience with container security using tools like Aqua Security or Twistlock.
• Proficiency in scripting languages like PowerShell, Python, or Bash.
• Azure DevOps Engineer Expert Certification is preferred.

Additional Required Skills:

• Experience with Azure Kubernetes Service (AKS) and container orchestration.
• Knowledge of compliance frameworks such as CIS, SOC2, and PCI DSS.
• Understanding of microservices architecture and securing APIs.
• Familiarity with GitHub practices and tools like Flux or ArgoCD.

Email id to share CV's: amol.yadav@aurionpro.com and contact me at 9321518346.

Thanks,

Amol