Senior DevSecOps Engineer

Harris

IndiaremotePosted 2 days ago

Skill Required

DevSecOps-EngineerCloud-Security-EngineerPlatform-Security-EngineerSecurity-EngineerCloud-Systems-EngineerSenior-DevSecOps-EngineerSenior-DevSecOps-DeveloperLead-DevSecOps-EngineerSecurity-DevOps-EngineerDevOps-Security-EngineerDevSecOps-Engineer-JobsSOCCD pipelinesKubernetesEngineeringautomationTerraformsimilar)securityfintechwrittenTestNGDockerdesignDevOpsISO 27001AzureCI/CDCloudOWASPUnityAWSGCPandCICDFulltime

Key highlights

Experience: 7-8 years
Work Mode: Remote (Mumbai)
Shift: 5:30pm IST to 2:30am IST
Key Benefit: 30 days total leave per calendar year
Requirement: Direct experience securing CI/CD pipelines

Role overview

At ClearDATA, we provide secure, compliant cloud and managed services designed specifically for the healthcare industry. We are looking for a Senior DevSecOps Engineer to build security into how ClearDATA ships software, working closely with the R&D organization to secure CI/CD pipelines, harden build and deployment processes, and ensure security is integrated into the engineering workflow. Additionally, the role involves joining the Professional Services team to lead technical implementations across AWS, Azure, and GCP environments.

Responsibilities

Partner with R&D to design and maintain secure CI/CD pipelines, from code commit through deployment.
Integrate static and dynamic application security testing (SAST/DAST), dependency and container scanning, and secrets management into the development lifecycle.
Harden build systems, artifact repositories, and deployment tooling against common attack paths.
Own infrastructure-as-code security: reviewing and improving how Terraform, Kubernetes, and cloud configurations are written and deployed.
Act as the security point of contact for engineering teams, helping them fix issues without slowing them down unnecessarily.
Review new tools, services, and architecture decisions for security implications before they ship.
Build automation and guardrails so secure practices are the path of least resistance for developers, not an extra step.
Work with the IT/ITSec Manager and Senior Compliance Analyst to make sure pipeline and infrastructure changes stay aligned with our compliance obligations.
Support incident response for anything touching build, deployment, or production infrastructure.
Help set and maintain security standards for software development lifecycle.

Requirements

7-8 years in DevOps, platform engineering, or security engineering, with real hands-on pipeline and infrastructure experience.
Direct experience securing CI/CD pipelines and build systems, not just running them.
Strong background with cloud infrastructure (AWS, Azure, or GCP) and infrastructure-as-code (Terraform or similar).
Comfortable with containers and orchestration (Docker, Kubernetes).
Experience with SAST/DAST tools, dependency scanning, and secrets management.
Able to work directly with engineers’ day to day and explain security tradeoffs in terms that land.
Excellent Communication Skills (Written & Verbal)
Working Independently.
Critical Thinking

Nice to have

Familiarity with HIPAA, SOC 2, HITRUST, or GDPR is a plus, especially in healthcare or another regulated industry.
Experience in a healthcare, fintech, or other regulated environment where security and compliance carry real weight.
Relevant certifications such as AWS/Azure/GCP security specialties, CKS, or similar.
A background writing your own tooling or automation rather than just configuring off-the-shelf products.