search Browse Jobs
DevSecOps EngineerSutherland · Hyderabad, TS, in
Sutherland logo

Sutherland

company page ↗

DevSecOps Engineer

🗓️ Posted 2026-09-04 Hyderabad, TS, in Full-time Hybrid ICT
💰 Salary Not shared 📊 Market ₹120,000–₹250,000/mo

About the Company

We are a leading global business and digital transformation partner. We work with iconic brands worldwide. We are an AI-led digital transformation company delivering measurable business outcomes. We design, run, and automate the operations we transform - so our AI reaches production and keeps improving. IT Services and IT Consulting Specialties: IT Services, Technology, Healthcare, Banking and Financial Services, Insurance, Travel & Entertainment, Telecom, software as a service, Google Cloud, Process Consulting, Design Thinking, Experience Labs, Digital Transformation, Customer Experience, Conversational AI, Data & Analytics, Retail and CPG

Responsibilities

  • ● Embed security into every layer of cloud infrastructure and software delivery pipeline
  • ● Ensure GCP and AWS environments, Kubernetes clusters, CI/CD pipelines, and internal endpoints are secure, compliant, and hardened without slowing down engineering velocity
  • ● Own cloud security posture management across GCP and AWS
  • ● Design and enforce IAM policies, service account hygiene, least-privilege access controls, and workload identity across multi-cloud environments
  • ● Implement VPC security controls
  • ● Internalise and secure service endpoints
  • ● Continuously audit and reduce the public attack surface
  • ● Manage secrets hygiene
  • ● Lead cloud security incident response
  • ● Own compliance reporting for SOC 2, HIPAA, and ISO 27001
  • ● Conduct regular threat modelling, security reviews, and architecture risk assessments
  • ● Harden GKE clusters
  • ● Implement and manage network policies to enforce east-west traffic segmentation between namespaces and services
  • ● Deploy and operate runtime security tooling for threat detection inside cluster workloads
  • ● Manage Kubernetes RBAC with least-privilege principles
  • ● Audit and remediate overpermissioned service accounts
  • ● Secure the container supply chain
  • ● Implement Istio security controls
  • ● Continuously audit running workloads for security drift
  • ● Secure the GitLab CI/CD pipeline end-to-end
  • ● Integrate SAST, DAST, dependency scanning, container scanning, and secret detection natively into GitLab CI
  • ● Own the triage and remediation workflow
  • ● Implement IaC security scanning as a mandatory pipeline gate for all Terraform changes
  • ● Manage GitLab token hygiene
  • ● Define and enforce pipeline security policies organization-wide using GitLab security policy-as-code
  • ● Audit and reduce the external attack surface
  • ● Implement and maintain WAF and Cloud Armor rules to protect externally exposed services
  • ● Enforce TLS certificate management
  • ● Manage bastion host security
  • ● Own DNS security controls
  • ● Build security automation pipelines
  • ● Instrument security observability in Datadog
  • ● Develop and maintain runbooks for security incidents