DevSecOps Engineer III

Job Title : DevSecOps Engineer III

Location - Pune (Hybrid)

About the Team:

DevOps team is at the core of Helpshift engineering. We have a centralised DevOps team in Helpshift and that essentially means we have our technical depth both horizontally and vertically. We’re responsible for creating, maintaining, scaling and securing infrastructure used by many teams for critical workloads. 

DevOps team work in following areas:

• Production & Development Infrastructure Provisioning and Maintenance
• Database Infrastructure
• Automations
• Core Infrastructure (Scalability, Performance & Optimisation)
• Security & Compliance
• Engineering Processes

You’ll be in a team that maintains, builds and scale infrastructure that will host the production workload as well as support internal engineering teams. You’ll make decisions with a significant impact on Helpshift.

Responsibilities:

• Design, implement, and maintain secure CI/CD pipelines for automating deployment, configuration, and testing processes.
• Own Helpshift production services and ensure complete monitoring coverage, troubleshoot and fix production issues.
• Build a seamless zero-downtime process to upgrade our core infrastructure (ScyllaDB, Elasticsearch, Kafka, MongoDB, Redis)Move us to a region with no downtime. Build a cloud infrastructure that’ll be easy to move to a different cloud service provider.
• Collaborate with development and operations teams to integrate security practices into the software development lifecycle.
• Conduct regular security assessments, vulnerability scans, and penetration testing to identify and mitigate security risks.
• Implement and manage security tools, including but not limited to static code analysis, dynamic application security testing (DAST), and container security scanners.
• Develop and maintain infrastructure as code (IaC) templates for provisioning and configuring cloud resources securely.
• Monitor and respond to production incidents, including investigation, containment, and remediation activities.
• Stay up-to-date with the latest security threats, vulnerabilities, and best practices, and make recommendations for continuous improvement.
• You will play a pivotal role in ensuring the security, scalability, and reliability of our infrastructure and applications.
• You will collaborate closely with cross-functional teams to implement security best practices throughout the development lifecycle, automate security processes, and enhance our overall DevSecOps capabilities.
• Mentor junior team members and provide guidance on security best practices and techniques.

• Relevant experience of 8+ years and above.
• In-depth knowledge of running/managing UNIX-like operating systems (we use Ubuntu).
• Strong knowledge of networking protocols, security architectures, and identity and access management (IAM) principles.
• Familiarity with compliance standards and regulations such as GDPR, HIPAA, PCI-DSS, and SOC 2.
• Experience with containerisation technologies (e.g., Docker, Kubernetes) and securing containerised environments.
• Experience in Designing and building solutions that are highly scalable, fault tolerant and cost-effective
• Experience of various FOSS tools for monitoring, graphing, capacity planning, and logging.
• Experience with IaaC tools like Ansible, Puppet, Terraform.
• Experience with Cloud Computing platforms like Amazon AWS, Google Cloud Platform, Heroku.
• Experience with managing NoSQL and RDBMS
• Experience with queuing systems (Kafka, RabbitMQ) and Big data platforms (Hadoop)
• Good programming skills with focus on scripting (Python, Shell, Perl).
• Ability to analyse bottlenecks in architecture and quickly debug to reach resolution for issues
• Have an automation mindset and ability to reason and work with complex systems.
• Excellent communication and documentation skills
• Quick learner and good mentor for junior team members