{"id":3318544,"url":"https://alion.io/job/material-technical-lead-devops-security","title":"Technical Lead - DevOps & Security","company":{"id":178614,"name":"Material","domain":"materialplus.io","url":"https://alion.io/company/materialplus","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Gurgaon, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"AI Agents","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"Configuration Management","optional":false},{"name":"LangSmith","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"OpenTelemetry","optional":false},{"name":"Platform Engineering","optional":false},{"name":"PostgreSQL","optional":false}],"status":"live","first_seen_at":"2026-10-27T05:25:28Z","employer_posted_date":null,"last_verified_at":"2026-10-27T05:25:28Z","board_verified":false,"closed_at":null,"days_open":4,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":4},"description":"About the Role:\n\nSrijan, a Material company, is a global digital engineering firm specialising in solving complex technology challenges. We are seeking a Technical Lead DevOps & Security with strong expertise in Azure platform security, identity and access management, API security, cloud networking, observability, and DevOps engineering.\n\nResponsibilities:\n\n- Design and implement Azure platform security controls using Microsoft Entra ID, Azure API Management (APIM), Azure networking, and native Azure monitoring and security services.\n\n- Configure Microsoft Entra ID app registrations, service principals, OAuth 2.0 scopes, delegated and application permissions, OBO token flows, and consent models.\n\n- Implement resource-scoped permissions, including Exchange Application RBAC and resource-specific consent (RSC)-style scoping.\n\n- Develop and stage APIM policies, including client-specific policies, correlation-ID propagation, content-safety controls, and token-limit enforcement.\n\n- Configure network security groups, firewall and egress rules, private endpoints, private connectivity, and subnet segmentation.\n\n- Implement observability and audit logging using Azure Monitor, Log Analytics, Microsoft Sentinel, OpenTelemetry, and KQL.\n\n- Review application source code and agent workflows to determine minimum permissions for MCP servers, tools, and Microsoft Graph resources.\n\n- Build shared instrumentation libraries or SDKs that enforce structured event emission, schema compliance, and consistent logging.\n\n- Implement CI/CD pipelines and infrastructure-as-code practices to promote controls through DEV and UAT environments.\n\n- Follow a native-first, GA-only approach, prioritising existing Azure security capabilities.\n\n- Apply default-deny, least-privilege, and fail-closed principles to prevent unauthorised access.\n\n- Design and execute positive and negative security tests to verify permitted operations and block unauthorised access.\n\n- Produce audit-ready evidence, including permission exports, allow/deny matrices, tamper tests, and control designs.\n\n- Coordinate with client platform, cloud networking, and SecOps teams to implement network segmentation and security dashboards.\n\n- Manage control implementation through two-week sprint cycles, ensuring staged promotion and validation.\n\n- Collaborate with architecture and governance stakeholders to support ARB, TRC, and security/compliance sign-offs.\n\n- Drive continuous hardening of platform controls, ensuring they are operationally effective and verifiable.\n\nRequirements :\n\n- 6 - 10 years of experience in DevOps engineering, cloud security, platform engineering, or security engineering, with strong hands-on expertise in Microsoft Azure.\n\n- Strong knowledge of Microsoft Entra ID, including app registrations, service principals, OAuth 2.0, and consent management.\n\n- Hands-on experience with Azure API Management, policy authoring, and security policy enforcement.\n\n- Strong understanding of Azure networking (NSGs, firewalls, egress controls, private endpoints, subnet segmentation).\n\n- Experience with Azure Monitor, Log Analytics, Microsoft Sentinel, OpenTelemetry, and KQL.\n\n- Ability to analyse source code and derive least-privilege permissions for AI agents, MCP servers, and Microsoft Graph resources.\n\n- Experience developing shared instrumentation libraries, structured logging, and telemetry controls.\n\n- Strong understanding of CI/CD pipelines, infrastructure as code, and controlled promotion across environments.\n\n- Practical experience with default-deny access, fail-closed controls, and security bypass validation.\n\n- Ability to produce clear technical documentation, control designs, and audit-grade evidence.\n\n- Strong collaboration and stakeholder management skills.\n\n- Ability to work in an Agile environment and deliver security controls within defined timelines.\n\n- Experience with PlainID, AI agent platforms, LLM gateways, MCP hubs, LangSmith, PostgreSQL, and Azure AI security (Content Safety, Prompt Shields) would be an advantage.\n\nWorking Conditions :\n\n- The role follows a native-first, GA-only approach with staged DEV-to-UAT promotion, positive and negative testing, and documented sign-off before client handover. Production changes are managed by the client through its own change-control process.\n\nSkills\nDevOps, DevSecOps, IT Security Strategy, Security Protocols, Azure, Cloud Security, Configuration Management, Entra ID, Security Monitoring Tools, CI/CD Pipeline","description_format":"text","description_chars":4483,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Creative Agencies","Branding","Market Research"],"lifecycle":[{"event":"open","at":"2026-10-27T06:29:10Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":4,"expected_fill_days":18,"reasons":["seen:4","velocity","win:early"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/material-technical-lead-devops-security","json_url":"https://alion.io/job/material-technical-lead-devops-security.json","meta":{"generated_at":"2026-10-31T13:17:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20616,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":178614},"rest":"https://alion.io/mcp/rest/get_company?id=178614"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmaterial-technical-lead-devops-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmaterial-technical-lead-devops-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmaterial-technical-lead-devops-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/material-technical-lead-devops-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmaterial-technical-lead-devops-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3318544}},{"tool":"search_jobs","arguments":{"company":"materialplus.io","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3318544},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}