RedyHire Technologies is an innovation-driven company reimagining the future of hiring. Founded in Bengaluru, we blend AI, data, and automation to solve the toughest recruitment challenges. Our mission is to make hiring efficient, unbiased, and deeply insightful for companies of all sizes. We’re a team of technologists, problem-solvers, and hiring experts building tools that matter. At RedyHire, we don’t just build software — we build smarter hiring ecosystems.

Experience: 7+ Years

Location: On-site

Department: Platform & Security Infrastructure Engineering

About the Role We are looking for a Senior DevSecOps / SecOps Engineer to design, automate, secure, and operate infrastructure and software delivery across cloud, on-premises, bare-metal, and air-gapped environments. You will work across Security, SRE, Platform, and Software Engineering to build secure-by-default platforms, hardened infrastructure, automated security controls, and reliable delivery pipelines.

Key Responsibilities:

Security Engineering & Developer Enablement

• Build secure-by-default paved roads, reusable templates, and platform security controls.
• Integrate SAST, DAST, SCA, secret scanning, container scanning, and IaC security into CI/CD.
• Develop pre-commit checks, CLI tooling, automation, and developer guardrails to identify security issues early.
• Establish secure engineering practices across source control, build, release, deployment, and runtime environments.

Cloud, Infrastructure & Platform Security:

• Build and maintain hardened Terraform and Ansible modules across GCP, on-premises, baremetal, and air-gapped environments.
• Secure and operate Docker, Podman, Kubernetes, Artifact Registry, and Harbor.
• Implement IAM, RBAC, least privilege, short-lived credentials, network policies, TLS, ingress/egress controls, and secure service-to-service communication.
• Perform OS, VM, container, Kubernetes, and bare-metal hardening against defined security baselines.
• Design secure deployment, patching, upgrade, and artifact-promotion workflows for restricted and disconnected environments.
• Secure and operate NGINX as part of application ingress, reverse proxy, and service-delivery infrastructure.
• Implement GitOps security and deployment controls using Argo CD, Flux, Helmfile, and Kustomize.

SecOps, Vulnerability Management & Incident Response:

• Own vulnerability management from discovery and triage through remediation,patching, validation, and reporting.
• Operationalize findings from Trivy, SonarQube, OWASP ZAP, and related security tooling.
• Automate configuration drift detection, compliance checks, and remediation.
• Monitor security events and support incident detection, investigation, containment, remediation, and post-incident improvements.
• Partner with SecOps and SRE teams on runtime security, threat detection, and security monitoring.

CI/CD, Supply Chain & Release Security:

• Secure Bitbucket Pipelines and software delivery workflows.
• Secure build and package ecosystems using uv, pnpm, Verdaccio, Conventional Commits, and semantic-release.
• Implement software supply-chain security, dependency controls, artifact integrity, CODEOWNERS, and protected release workflows.
• Manage trusted container/image promotion through Artifact Registry and Harbor, including workflows for air-gapped environments.
• Optimize security automation for strong coverage with minimal impact on developer velocity

Secrets, Certificates & Runtime Platforms:

• Manage secrets, credentials, certificates, and sensitive configuration using Infisical Self Hosted.
• Build and operate self-managed certificate and mTLS services, including certificate issuance, rotation, trust management, and service-to-service authentication.
• Implement and operate observability and monitoring using OpenTelemetry, SigNoz, Grafana, Prometheus, Loki, and related telemetry components across metrics, logs, traces,alerting, and dashboards.
• Support monitoring stack evolution and integration across cloud, on-premises, bare-metal, and air-gapped environments.
• Secure and operate event-driven workloads using KEDA and Knative.
• Support secure AI/ML platforms using Triton Inference Server, vLLM, MLflow, and Redis across cloud and on-prem environments.

Governance & Security Architecture:

• Conduct threat modeling and security reviews for services, APIs, infrastructure, data flows, and platform integrations.
• Implement policy-as-code, compliance-as-code, continuous evidence collection, and security governance.
• Support controls aligned with CMMI Level 5, CIS Benchmarks, SOC 2, ISO 27001, GDPR, and applicable organizational standards.

Required Skills & Experience:

• 7+ years of hands-on experience in DevSecOps, SecOps, Cloud Security, Platform Engineering, or DevOps.
• Strong experience with GCP, Terraform, Ansible, Linux, Docker/Podman, Kubernetes, and cloud native security.
• Hands-on experience with on-premises, bare-metal, and/or air-gapped environments.
• Strong knowledge of infrastructure hardening, vulnerability management, IAM/RBAC, secrets management, CI/CD security, and incident response.
• Experience with Bitbucket Pipelines, Argo CD, Flux, Helmfile, Kustomize, Artifact Registry, and Harbor.
• Practical experience with SonarQube, OWASP ZAP, Trivy, CODEOWNERS, and security automation.
• Strong understanding of NGINX, TLS, mTLS, certificate lifecycle management, container security, Kubernetes security, and secure artifact management.
• Hands-on experience with Grafana, Prometheus, Loki, OpenTelemetry, and/or SigNoz.
• Strong scripting and automation skills using Python, Bash, or similar.
• Strong troubleshooting, ownership, and cross-functional collaboration skills.

Technology Stack

• Cloud & IaC: GCP, Terraform, Ansible
• Infrastructure: On-Premises, Bare Metal, Air-Gapped / Restricted Networks
• Containers & Registry: Docker, Podman, Kubernetes, Artifact Registry, Harbor
• CI/CD & Release: Bitbucket Pipelines, Conventional Commits, semantic-release
• Build & Package: uv, pnpm,
• Security: SonarQube, OWASP ZAP, Trivy, CODEOWNERS
• Networking & PKI: NGINX, TLS, mTLS, Certificate Management
• GitOps: Argo CD, Flux, Helmfile, Kustomize
• Secrets: Infisical Self Hosted
• Autoscaling: KEDA, Knative
• AI/ML: Triton Inference Server, vLLM, MLflow, Redis
• Observability & Monitoring: OpenTelemetry, SigNoz, Grafana, Prometheus, Loki
• SecOps: Hardening, Vulnerability Management, IAM, Threat Modeling, Security Monitoring, Incident Response.