DevSecOps Engineer

Job not on LinkedIn

🔥 10 minutes ago

🌐 Egypt, India – Remote

🇪🇬 Egypt – Remote 🇮🇳 India – Remote

⏰ Full Time

🟠 Senior

🔴 Lead

⛑ DevOps & Site Reliability Engineer (SRE)

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Sutherland

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1986

🏥 Healthcare

🛡️ Insurance

✈️ Travel

💰 $300M Secondary Market on 2014-10

Healthcare • Insurance • Travel

Sutherland is a global company specializing in digital transformation and business process outsourcing services. They leverage advanced technologies such as Artificial Intelligence, automation, and cloud engineering to drive digital performance and optimize critical business operations. Sutherland offers a variety of services including digital CX, enterprise technology solutions, and intelligent automation across multiple industries such as banking, healthcare, and telecommunications. Their focus is on delivering measurable outcomes, enhancing customer experiences, and enabling business agility through innovative digital solutions.

📋 Description

• Own cloud security posture management across GCP and AWS, including continuous assessment, misconfiguration detection, and remediation tracking • Design and enforce IAM policies, service account hygiene, least-privilege access controls, and workload identity across multi-cloud environments • Implement VPC security controls, firewall rules, network policies, ingress/egress restrictions, and Private Google Access • Internalise and secure service endpoints using internal load balancers, private endpoints, and VPN/interconnect; continuously reduce the public attack surface • Manage secrets hygiene with GCP Secret Manager and AWS Secrets Manager, eliminate hardcoded credentials, and rotate secrets programmatically • Lead cloud and Kubernetes security incident response: triage, contain, investigate, and remediate • Own compliance reporting for SOC 2, HIPAA, and ISO 27001, including evidence collection, gap analysis, and control implementation • Conduct threat modelling, security reviews, and architecture risk assessments • Harden GKE clusters using CIS benchmarks, pod security standards, and admission control policies • Implement Kubernetes network policies, RBAC, runtime security tooling, and container supply-chain controls • Implement Istio security controls including mTLS, authorisation policies, and east-west traffic observability • Secure GitLab CI/CD pipelines with runner protection, permission restrictions, branch protection, MR approvals, integrated security scanning, and policy-as-code • Implement mandatory Terraform IaC security gates using tfsec and Checkov • Manage GitLab token hygiene, expiry policies, project token rotation, and personal access token audits • Audit public endpoints and maintain WAF, Cloud Armor, TLS, bastion host, DNSSEC, private DNS, and split-horizon DNS controls • Build security automation pipelines for policy enforcement, compliance checks, and vulnerability remediation as code • Instrument security observability in Datadog, including threat detection dashboards and alert tuning • Develop runbooks for incidents, vulnerability response, and access reviews • Champion security training and awareness; conduct secure code reviews and threat modelling workshops

🎯 Requirements

• 7+ years in DevSecOps, cloud security, or infrastructure security engineering • Deep hands-on experience securing Kubernetes clusters in production, including RBAC, network policies, pod security, and runtime protection • Proven experience with GCP and/or AWS security services and IAM design • Strong CI/CD security knowledge, including pipeline hardening, secrets management, and integrated scanning • Experience internalising service endpoints and reducing cloud attack surface • Familiarity with HIPAA, SOC 2, or ISO 27001 compliance in regulated environments • Clear communication skills, including explaining critical vulnerabilities to a CTO and writing runbooks for engineers • Required hands-on knowledge of GCP security services: Security Command Center, IAM, VPC Service Controls, Cloud Armor, Secret Manager, Binary Authorization • Required hands-on knowledge of AWS security services: GuardDuty, Security Hub, IAM, KMS, Macie, AWS Config • Required Kubernetes knowledge: GKE hardening, pod security standards, network policies, RBAC, admission controllers • Required GitLab knowledge: CI/CD security, SAST/DAST, dependency scanning, pipeline policy management • Required Terraform knowledge: IaC security scanning with tfsec and Checkov, secure module design • Required Datadog knowledge: security monitoring, threat detection, alert management • Required Istio knowledge: mTLS, authorisation policies, service mesh security • CKS, Google Professional Cloud Security Engineer, or AWS Security Specialty certifications are nice to have, not required • Good-to-have experience with Falco, OPA/Gatekeeper, HashiCorp Vault, Wiz/Orca/Prisma Cloud, Trivy/Snyk, Splunk/Chronicle, Python or Go, eBPF security tooling, penetration testing, red teaming, STRIDE or PASTA threat modelling, and service mesh security beyond Istio

🏖️ Benefits

• Employees can work remotely