DevSecOps Engineer Expert

About HCLTech

HCLTech is a global technology company, spread across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. We are powered by our people a global, diverse, multi-generational talent - representing 161 nationalities whose unique spark, perspective and boundless passion drive our culture of proactive value creation and problem-solving.

Our purpose is to bring together the best of technology and our people to supercharge progress for everyone, everywhere our clients, partners, their stakeholders, communities, and the planet. As a company, we are deeply focused on accelerating our ESG agenda. We are also creating technology-enabled sustainable solutions with and for our clients and partners. We embed ESG imperatives into every aspect of our business and ensure that the progress we supercharge is responsible, inclusive and beneficial to all our stakeholders in the long term. We have committed to achieving net zero by 2040.

To learn more about how we can supercharge progress for you, visit www.hcltech.com

We are seeking a highly skilled DevSecOps expert to lead the design and implementation of secure CI/CD pipelines and cloud architectures. The ideal candidate will be passionate about security, automation, and best practices in cloud-native environments, guiding our team to build secure, scalable, and resilient systems.

Key Responsibilities:

Design and build secure CI/CD pipelines utilizing GitHub Actions, Terraform, and other automation tools

• Architect and manage secure cloud infrastructure on GKE and GCP, implementing security best practices.
• Lead vulnerability management initiatives using tools like Trivy and GCP security services.
• Develop and enforce policies as code with OPA/Gatekeeper to ensure compliance and security standards.
• Champion "secure by default" principles across development and operations teams.
• Drive vulnerability assessments, patch management, and security incident response processes.
• Collaborate with development teams to embed security into the software development lifecycle.
• Required Skills and Experience:
• Extensive experience (9-11 years) in DevSecOps, cloud security, or infrastructure engineering
• Deep expertise in GCP cloud services, GKE, Terraform, and security tools (Trivy, OPA/Gatekeeper
• Proven track record in building and managing secure CI/CD pipelines.
• Strong understanding of vulnerability management and policy as code.
• Leadership abilities to guide security best practices across teams.