{"id":3264444,"url":"https://alion.io/job/sarvam-ai-sde3-infrastructure-security-engineer-devsecops","title":"SDE3, Infrastructure Security Engineer (DevSecOps)","company":{"id":229,"name":"Sarvam AI","domain":"sarvam.ai","url":"https://alion.io/company/sarvam-ai","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":95,"open_postings":37,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":91,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":15000,"max_usd":37000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":854},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"ArgoCD","optional":false},{"name":"CI/CD","optional":false},{"name":"Cilium Tetragon","optional":false},{"name":"Cloudflare","optional":false},{"name":"Falco","optional":false},{"name":"GitOps","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Kyverno","optional":false},{"name":"Linux","optional":false},{"name":"OpenTofu","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"Cloudflare WAF","optional":true},{"name":"GCP","optional":true}],"status":"live","first_seen_at":"2026-10-26T06:33:29Z","employer_posted_date":"2026-10-26","last_verified_at":"2026-11-02T06:21:00Z","board_verified":true,"closed_at":null,"days_open":7,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":7},"description":"About the team\nSarvam builds Indic-language AI used at population scale. The CPU Infrastructure team runs everything outside the GPU fleet: Kubernetes across Azure, AWS, GCP and Indian sovereign clouds, the network between them, Cloudflare, identity, secrets, observability, cost and the delivery pipeline every product ships through.\nThe team builds and runs what it builds. Engineers own real systems end to end, and every repeated piece of manual work is a candidate for automation. As an AI company, we are building AI agents into our own operations, to plan and review infrastructure changes, triage alerts and handle routine issues, with engineers setting the guardrails.\nAbout the role\nYou are an infrastructure engineer whose first instinct is security, and who builds rather than only operates. You have worked on banking, fintech, payments or similarly regulated products, where a misconfiguration is an incident and an audit is routine. Here you set what “secure” means across Sarvam’s infrastructure and build the automation that enforces it, so security is a property of the pipeline rather than a review step. You work closely with the compliance team.\nThis is a hands-on role: most of your time goes into building, and you guide engineering teams across Sarvam on security - setting standards, reviewing security-relevant work and mentoring engineers.\nResponsibilities\nDefine and enforce security baselines for Kubernetes, cloud accounts, container images and CI/CD across all clouds\nWrite the policy gates in the delivery pipeline (OPA / Conftest, Kyverno or equivalent): network exposure, IAM, image provenance, secrets, data residency\nOwn secrets and workload identity: Vault or cloud-native equivalents, rotation, short-lived and scoped credentials, no long-lived keys\nBuild detection and response: runtime security (Falco / Tetragon or equivalent), log-based detections, alerting and playbooks\nRun the finding-to-fix loop for security findings: triage, assign, fix, add a detection, retest\nUse LLMs and AI agents in security work: triaging findings, reviewing infrastructure changes, tuning detections, drafting incident timelines - and secure the agents themselves with scoped, short-lived permissions and audit trails\nHarden the supply chain: image signing and scanning, dependency policy, SBOMs\nAutomate compliance evidence (CERT-In, ISO 27001, SOC 2, DPDP) together with the compliance team\nSet the security standards other engineers follow and review security-relevant changes\nTake part in on-call and lead security incidents\nRequirements\n5-9 years in DevOps, platform or security engineering, with at least 2 in a bank, fintech, payments company or other regulated environment\nStrong Kubernetes and Linux fundamentals; has run production clusters on at least one major cloud\nHands-on with Terraform / OpenTofu and GitOps (ArgoCD or Flux)\nHas built security automation, not only operated tools: policy-as-code, secrets rotation, CI/CD security gates or detection pipelines\nWorking knowledge of IAM, network security, TLS and secrets management across clouds\nScripting and tooling in Python or Go\nHas been through security audits and knows what evidence auditors need\nHas built or used AI-based automation in infrastructure or security work, and understands the risks of AI agents: prompt injection, over-broad permissions, unreviewed actions\nNice to have: Vault, SPIFFE / SPIRE, Falco or Tetragon, Cloudflare WAF, incident response lead experience, multi-cloud experience","description_format":"text","description_chars":3496,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","LLM & Generative AI","Speech & Audio AI","Foundation Models"],"lifecycle":[{"event":"open","at":"2026-10-26T08:11:36Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":6,"expected_fill_days":91,"reasons":["conf:4","velocity","win:early"],"computed_at":"2026-11-02T06:13:15Z"},"pay":null,"html_url":"https://alion.io/job/sarvam-ai-sde3-infrastructure-security-engineer-devsecops","json_url":"https://alion.io/job/sarvam-ai-sde3-infrastructure-security-engineer-devsecops.json","meta":{"generated_at":"2026-11-02T06:37:03Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9528,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":229},"rest":"https://alion.io/mcp/rest/get_company?id=229"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsarvam-ai-sde3-infrastructure-security-engineer-devsecops"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsarvam-ai-sde3-infrastructure-security-engineer-devsecops"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsarvam-ai-sde3-infrastructure-security-engineer-devsecops"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sarvam-ai-sde3-infrastructure-security-engineer-devsecops\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsarvam-ai-sde3-infrastructure-security-engineer-devsecops"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3264444}},{"tool":"search_jobs","arguments":{"company":"sarvam.ai","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3264444},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}