CGI
Posted 1mo ago

Senior DevSecOps Engineer

CGI
Bangalore, Karnataka, India
OnsiteFull Time
Responsibilities
  • architecting pipelines
  • securing platforms
  • automating workflows
Requirements
  • Bachelor's or Master's in CS/Engineering
  • 5–8+ years DevSecOps/SRE/platform experience
  • Cloud certifications recommended
  • Expertise in CI/CD
  • Containers, IaC
  • Security automation and monitoring
Technical tools mentioned
GitHubGitLabJenkinsDockerKubernetesTerraformHelmPythonSASTDASTSCAMicrosoft Power BIMicrosoft FabricMicrosoft AzureAWSGCPSAFe

Job description

Position Description:

Company Profile:
Founded in 1976, CGI is among the largest independent IT and business consulting services firms in the world. With 94,000 consultants and professionals across the globe, CGI delivers an end-to-end portfolio of capabilities, from strategic IT and business consulting to systems integration, managed IT and business process services and intellectual property solutions. CGI works with clients through a local relationship model complemented by a global delivery network that helps clients digitally transform their organizations and accelerate results. CGI Fiscal 2024 reported revenue is CA$14.68 billion and CGI shares are listed on the TSX (GIB.A) and the NYSE (GIB). Learn more at cgi.com.

Job Title: Senior DevSecOps Engineer
Position: Senior DevSecOps Engineer

Experience: 6 - 9 Years

Category: IT Infrastructure

Main location: Bangalore

Position ID: J0726-0175


Role Purpose
As a Senior DevSecOps Engineer within the ASL team, candidate will be responsible for designing, securing, and scaling DevSecOps platforms and pipelines that enable secure-by-design software delivery across Amadeus. The role focuses on integrating security controls into CI/CD ecosystems, strengthening platform resilience, and supporting enterprise-wide Application Security and SDL initiatives.
________________________________________
Degree Expectation
• Bachelor’s or Master’s degree in Computer Science, Engineering, Systems Engineering, or equivalent
• Cloud certifications (Azure preferred; AWS/GCP acceptable) are highly recommended
________________________________________
Experience Expectation
• 5–8+ years of experience in DevSecOps / SRE / Platform Engineering
• Proven experience in secure CI/CD implementation, cloud environments, and automation at scale
• Exposure to application security practices (e.g., SAST, DAST, container security, secrets management) in enterprise environments
________________________________________
Key Responsibilities
• Architect, implement, and secure CI/CD pipelines (GitHub, GitLab, Jenkins) integrating automated security controls aligned with ASL/SDL requirements
• Operate and secure containerized platforms (Docker, Kubernetes) with strong adherence to DevSecOps and cloud security best practices
• Design and manage secure cloud-native architectures (preferably Microsoft Azure), including identity, networking, and platform security controls
• Implement and maintain DevSecOps toolchains, integrating security scanning solutions (SAST, DAST, SCA, container scanning) into build and release processes
• Develop and manage Infrastructure as Code (Terraform, Helm) to enable compliant, repeatable, and automated environment provisioning
• Ensure observability and reliability through logging, monitoring, alerting, and incident response frameworks for production-grade systems
• Automate operational workflows and security controls using Python scripting and platform automation techniques
• Enable data-driven decision making by developing dashboards and insights using Power BI (or similar tools), aligned with ASL KPIs and security metrics
• Leverage platforms such as Microsoft Fabric (or equivalent) for data integration, pipeline orchestration, and analytics
• Collaborate with Security, SDL, and Product teams to enforce secure development practices and improve overall application security posture
• Support high-availability and resilient systems, ensuring continuous, secure service delivery across environments
________________________________________
Deliverables / Expected Outcomes
• Fully automated, secure CI/CD pipelines with embedded security controls aligned to ASL standards
• Improved application security posture, with consistent adoption of DevSecOps and secure SDLC practices
• Highly available, scalable, and resilient DevSecOps platforms and toolchains
• Increased deployment velocity and operational efficiency through automation and standardization
• Enhanced observability and incident response readiness across platforms
• Actionable security and operational insights dashboards supporting governance, audits, and KPI tracking
• Strong alignment with CISO ASM strategy, enabling secure-by-default engineering practices across Amadeus
________________________________________
Key Competencies
• DevSecOps mindset with strong security-first approach
• Deep expertise in CI/CD, containers, cloud, and IaC
• Strong problem-solving and production support capabilities
• Ability to operate in a large-scale, enterprise, multi-stakeholder environment
• Excellent collaboration with global Security, SDL, and Engineering teams
Working experience with SAFe Agile framework will be a plus.

#LI-SA2

Life at CGI:
It is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…
You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction
Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise
You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons
Come join our team, one of the largest IT and business consulting services firms in the world.






















Skills:

  • Communication
  • DevOps Security
  • SAFe
  • DevOps Engineering
  • DevOps Engineering






What you can expect from us:

Together, as owners, let’s turn meaningful insights into action.

Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…

You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction.

Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.

You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.

That same commitment to fairness extends to how we use technology. To support our recruitment team, AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals.

Come join our team—one of the largest IT and business consulting services firms in the world.

About CGI

Provides information technology and business consulting services.

Similar jobs

DevSecOps Engineer roles near Bangalore, Karnataka
1d
Save
Mark Applied
Hide
DevSecOps Engineer
Bengaluru, Karnataka, India
OnsiteFull Time
Ericsson
EricssonNasdaq Stockholm: ERIC B: Global provider of telecommunications equipment and services.
8+ YOERequires 8+ years in DevSecOps or platform engineering, strong CI/CD and automation skills, cloud-native observability expertise, security scanning, and experience operating production platforms.
Go, Svelte, Kubernetes, OpenStack, Cortex, Postgres, Cassandra, Kafka, Grafana, Prometheus, Loki, OpenTelemetry
1d
Save
Mark Applied
Hide
DevSecOps Engineer (789521)
Bangalore, Karnataka, India
OnsiteFull Time
Ericsson
EricssonNasdaq: ERIC: Manufactures telecommunications equipment and provides networking services.
8+ YOERequires 8+ years in DevSecOps or platform engineering, strong secure CI/CD and automation skills, cloud-native observability expertise, and experience owning production systems end to end.
Go, Svelte, Kubernetes, Cortex, Postgres, Cassandra, Kafka, OpenStack, Grafana, Prometheus, Loki, OpenTelemetry, SAST, SCA, AIOps, MLOps, LLMOps, RAG, CI/CD
1d
Save
Mark Applied
Hide
DevSecOps Engineer
Bangalore, Karnataka, India
OnsiteFull Time
Zensar
ZensarNational Stock Exchange of India: ZENSARTECH: Global technology firm providing digital transformation and infrastructure services.
8+ YOERequires 8–12 years of IT experience, including 4–5 years in AWS DevOps or DevSecOps, AWS CI/CD, EKS, GitOps, infrastructure as code, security tooling, and source control; bachelor's degree required.
Bitbucket, AWS CodeBuild, AWS CodePipeline, Amazon ECR, ArgoCD, Amazon EKS, AWS CDK, AWS CloudFormation, Docker, Kubernetes, Helm, AWS Inspector, AWS Secrets Manager, AWS Certificate Manager (ACM), AWS KMS, AWS IAM, Apache Camel, Spring Boot, AWS Service Catalog, AWS Audit Manager, Amazon API Gateway, Amazon EventBridge, Amazon SQS, Amazon S3, AWS Transfer Family, AWS Lambda, AWS Step Functions, AWS Config, Amazon CloudWatch, OpenTelemetry, GitHub
2d
Save
Mark Applied
Hide
Senior DevSecOps Engineer
Bengaluru, Karnataka, India
OnsiteFull Time
Haleon
HaleonLondon Stock Exchange: HLN: Produces and sells over-the-counter consumer health products.
Hands-on experience administering enterprise DevSecOps platforms, securing CI/CD pipelines, managing Azure cloud infrastructure, implementing Terraform IaC, and supporting security, governance, compliance, and Agile delivery.
GitHub Enterprise Cloud, GitHub Enterprise Server, Azure DevOps, SonarQube, Datadog, Docker Desktop, GitHub Advanced Security, CodeQL, Dependabot, GitHub Actions, SAST, SCA, DAST, Terraform Cloud, Terraform, AKS, ACR, Azure, Azure Functions, Azure Developer CLI (azd), AzureRM, SSO, SCIM, IaC, IDP
2d
Save
Mark Applied
Hide
Senior DevSecOps Engineer
Bengaluru, Karnataka, India
OnsiteFull Time
Haleon
HaleonLondon Stock Exchange, New York Stock Exchange: HLN: Global leader in consumer healthcare and over-the-counter medicines.
Hands-on experience administering enterprise DevSecOps platforms, securing CI/CD pipelines, managing Azure cloud infrastructure, Terraform, containers, observability, governance, and complex operational incidents.
GitHub Enterprise Cloud, GitHub Enterprise Server, Azure DevOps, SonarQube, Datadog, Docker Desktop, GitHub Advanced Security, CodeQL, Dependabot, GitHub Actions, Terraform Cloud, Terraform, Azure Kubernetes Service (AKS), Azure Container Registry (ACR), Azure, Azure Functions, Azure Developer CLI (azd), Azure Resource Manager (AzureRM), Azure DevOps
1w
Save
Mark Applied
Hide
Staff DevSecOps Engineer
Bengaluru, Karnataka, India
OnsiteFull Time
Observe.AI
Observe.AI: AI-powered platform for contact center intelligence and performance automation
9+ YOERequires 9+ years in software engineering, network security, and AWS security; secure cloud and infrastructure design experience; AWS expertise; large-scale systems knowledge; and strong communication skills.
AWS, SaaS, PAM, Access Analyzer, Identity Center, RBAC, GuardDuty, WAF, SIEM, CCNA, PF
1w
Save
Mark Applied
Hide
DevSecOps -Senior Analyst
Bangalore or Gurgaon
OnsiteFull Time
KPMG Global Services
KPMG Global Services: Provides global tax, audit, and advisory support services.
1+ YOEBachelor’s or master’s degree in a relevant field and 1–5 years in technical delivery, DevOps, cloud, or infrastructure engineering. Requires scripting, Linux/Windows, Azure, IaC, CI/CD, containers, and security tooling experience.
Python, PowerShell, Bash, Linux, Windows, Azure, Terraform, ARM templates, Azure DevOps, Docker, Kubernetes, Ansible, Azure Monitor, Log Analytics, ELK stack, SonarQube, Qualys, Microsoft Defender, CMDB
2w
Save
Mark Applied
Hide
Lead Engineer - Cloud IND
Bengaluru, Karnataka, India
OnsiteFull Time
OSB Group
OSB GroupLondon Stock Exchange: OSB: A UK-based specialist mortgage lender and retail savings bank.
5+ YOERequires 5–8 years of DevSecOps experience, primarily in Azure, plus Helm, Terraform, Kubernetes, CI/CD security, Azure security services, infrastructure-as-code, vulnerability management, and cloud compliance expertise.
Azure, Azure DevOps, Helm, Terraform, Kubernetes, GitHub Actions, GitLab, Azure Repos, Git, Azure Pipelines, Azure Artefact Feeds, Azure Key Vault, Azure Kubernetes Service (AKS), Azure Container Registry, SonarQube, OWASP ZAP, Checkov, Jib, Trivy, Snyk, Bicep, ARM templates, Microsoft Azure Active Directory (Azure AD), RBAC, Conditional Access Policies, Microsoft Defender for Cloud, Sentinel, Log Analytics, OPA/Gatekeeper, Azure Policy, Istio, Apache Kafka, App Gateway, APIM, Azure AD PIM, SAST, DAST, SCA, CIS, NIST, GDPR, ISO, CSA CCM, STRIDE, MITRE ATT&CK