DevSecOps Engineer
First seen by Alion on Sep 24, 2026.
Role Purpose :
The DevSecOps Engineer builds and secures the CI/CD pipelines, on-premise runtime environments, and observability systems supporting the platform. You automate deployment, implement shift-left security scanning, and ensure zero-downtime operations on private enterprise infrastructure.
Key Responsibilities :
- Architect and maintain automated build, test, and release pipelines using modern GitOps patterns.
- Harden on-premise infrastructure (Kubernetes, OpenShift, or bare-metal Linux) in compliance with enterprise security baselines.
- Implement integrated security tooling within the pipeline: SAST, DAST, container vulnerability scanning, secret detection, and Software Bill of Materials (SBOM) generation.
- Deploy and tune centralised observability stacks: logging (OpenSearch/ELK), distributed tracing (OpenTelemetry, Jaeger), and metrics/alerting (Prometheus, Grafana).
- Establish operational runbooks for backup, disaster recovery, zero-downtime rolling upgrades, and infrastructure-as-code (Terraform, Ansible).
Requirements & Qualifications :
- Experience: 6+ years in DevOps / Platform Engineering, with at least 3 years maintaining high-security, on-premise containerised environments.
- Container Orchestration: Advanced Kubernetes/OpenShift management, networking (CNI, service mesh like Istio or Linkerd), and storage plugins (CSI).
- Security & Hardening: Implementation of mTLS, HashiCorp Vault, identity providers (Keycloak/OIDC/SAML), CIS benchmarks, and network security policies.
- Observability: Deep experience instrumenting JVM metrics, Kafka cluster monitoring, and end-to-end distributed tracing.
Skills
DevSecOps, DevOps, CI/CD Pipeline, SAST, DAST, IAC Terraform, Kubernetes, HashiCorp Vault, OpenShift