Job Summary:
We are seeking a
DevSecOps Engineer
to design, build, and secure end-to-end CI/CD pipelines using
Azure DevOps
and
GitHub Actions
for cloud-native, containerized applications. The role involves automating build, test, and deployment workflows; implementing Infrastructure as Code with tools like
Terraform
; managing container deployments through
Azure Kubernetes Service
and
Azure Container Registry
; and embedding security controls such as SAST, DAST, dependency scanning, and secret management to ensure secure, scalable, and reliable software delivery.
Job Responsibilities:
-
Design, build, and maintain end-to-end CI/CD pipelines using Azure DevOps and GitHub Actions for cloud-native and containerized applications.
-
Automate build, test, and deployment workflows ensuring consistent and repeatable delivery across multiple environments.
-
Implement advanced pipeline features such as parallel jobs, multi-stage approvals, and automated rollback mechanisms.
-
Develop and maintain infrastructure as code (IaC) using tools like Terraform, ARM templates, or Bicep for provisioning and managing Azure resources.
-
Automate container builds and deployments using Azure Kubernetes Service (AKS) and Azure Container Registry (ACR).
-
Integrate automated scaling, monitoring, and alerting capabilities into application environments.
-
Embed security controls within CI/CD pipelines, including SAST, DAST, dependency scanning, and secret management.
-
Ensure seamless integration of development, security, and operations to deliver scalable, reliable, and secure applications.
Job Requirements:
-
5+ Years of relevant experience in DevOps.
-
Bachelors or Master's degree in Computer Science or relevant field.
-
Proven experience designing and maintaining CI/CD pipelines using
Azure DevOps
and
GitHub Actions
.
-
Experience automating container builds and deployments using
Azure Kubernetes Service
and
Azure Container Registry
.
-
Expertise in designing advanced CI/CD workflows, including parallel jobs, multi-stage approvals, and automated rollback strategies.
-
Strong understanding of cloud-native architecture, containerization, and microservices patterns.
-
Experience integrating automated scaling, monitoring, and alerting solutions within Azure environments.
-
Hands-on experience embedding security practices into
CI/CD pipelines
, including SAST, DAST, dependency scanning, and secrets management.
-
Solid understanding of
DevSecOps
principles, compliance requirements, and secure SDLC practices.
-
Strong troubleshooting, analytical, and problem-solving skills.
-
Excellent communication skills and ability to collaborate effectively across development, operations, and security teams.
-
Location: Lahore based opportunity.