About This Role
This engineering role focuses on designing, building, and maintaining enterprise-grade CI/CD pipelines and implementing security controls within them. The position involves automating application deployments, managing infrastructure as code, and collaborating with various teams to establish DevSecOps best practices. It suits an engineer with experience in Azure DevOps, Azure Cloud, Kubernetes, SAST, and DAST.
Responsibilities
- Design, build, and maintain enterprise-grade CI/CD pipelines using GitHub Actions and Azure DevOps
- Implement and manage Infrastructure as Code (IaC) solutions using Bicep and Azure native services
- Automate application deployments across Development, QA, UAT, and Production environments
- Integrate security scanning tools and DevSecOps controls into CI/CD pipelines
- Implement and maintain Static Application Security Testing (SAST)
- Implement and maintain Dynamic Application Security Testing (DAST)
- Implement and maintain Dependency and Vulnerability Scanning
- Implement and maintain Container Security Scanning
- Collaborate with Development, Security, and Infrastructure teams to establish DevSecOps best practices
- Build and optimize release and deployment automation processes
- Design monitoring, logging, and alerting solutions for cloud applications and infrastructure
- Implement cloud governance, compliance, and security standards
- Troubleshoot deployment issues, pipeline failures, and production incidents
- Drive continuous improvements for platform reliability, scalability, and security
Requirements
- 7 to 12 years of experience
- Azure Devops
- Azure Cloud
- Kubernetes
- SAST
- DAST
- GitHub Actions
- Azure DevOps Pipelines
- Continuous Integration (CI)
- Continuous Delivery/Deployment (CD)
- Build and Release Management
- Pipeline Optimization
- Azure Cloud Services
- Azure Resource Manager (ARM)
- Virtual Networks
- Storage Accounts
- Azure App Services
- Azure Functions
- Azure Kubernetes Service (AKS)
- Bicep
- ARM Templates
- Infrastructure Automation
- Configuration Management
- SAST Tools
- DAST Tools
- Dependency Scanning
- Vulnerability Management
- Security Compliance
- Shift-Left Security Practices
- Secret Management
- Docker
Nice to have:
About the Company
Sonata Software is a leading AI-first Modernization Engineering company with over $1.2 Billion in revenue, powered by its unique PlatformationTM framework. With over 6400 AI Engineers, the company helps enterprises transform from systems to intelligent business platforms leveraging a partner ecosystem. Sonata Software has a strong global presence, including key regions in the US, UK, India, Malaysia, Mexico, Australia, DACH, and Nordics, and is headquartered in Bengaluru, India. They are a trusted partner of Fortune 500 companies across various sectors and have deep collaborations with partners like Microsoft, AWS, Salesforce, and Snowflake.
