# DevSecOps Engineer

**Company**: S&P Global
**Location**: Hyderabad, Telangana
**Experience**: senior
**Job type**: full-time
**Category**: Engineering
**Industry**: Technology

**Apply**: https://spgi.wd5.myworkdayjobs.com/en-US/SPGI_Careers/job/Hyderabad-Telangana/Open-Source-Supply-Chain-Engineer_332424-2?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_9b96e01f-a5a

## Description

We are seeking a DevSecOps Engineer to help build and support secure, scalable software delivery practices.

**Key Responsibilities**

- Design and maintain secure CI/CD pipelines using GitHub Enterprise and related automation tools.

- Manage JFrog Artifactory, including repository governance, access controls, and integration with build and release processes.

- Implement Kubernetes security best practices, including RBAC, secrets management, network policies, and image security.

- Embed automated security controls into the delivery lifecycle, such as code, dependency, and container scanning.

- Partner with engineering, platform, and security teams to improve delivery speed, reliability, and risk reduction.

- Support infrastructure-as-code and configuration-as-code to improve consistency and auditability.

- Monitor and troubleshoot pipeline, deployment, and security issues across development and runtime environments.

- Create documentation, standards, and reusable patterns for secure software delivery.

**Required Qualifications**

- Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field, or equivalent experience.

- 3+ years of experience in DevOps, DevSecOps, platform engineering, or security engineering.

- Hands-on experience with Kubernetes administration and security controls.

- Experience with JFrog Artifactory in enterprise build and release environments.

- Experience with GitHub Enterprise, including repositories, pull requests, branch protection, and GitHub Actions.

- Understanding of CI/CD, infrastructure automation, and software supply chain security.

- Knowledge of containerization, vulnerability remediation, and scripting with Bash, Python, or similar tools.

- Strong problem-solving, communication, and cross-functional collaboration skills.

**Preferred Qualifications**

- Experience with policy-as-code, secrets management, and runtime security tools.

- Knowledge of artifact scanning, SBOM practices, and open-source dependency governance.

- Experience with Terraform, Helm, or similar infrastructure automation tools.

- Familiarity with compliance, audit controls, and secure engineering standards.

**Benefits**

- Health & Wellness: Health care coverage designed for the mind and body.

- Flexible Downtime: Generous time off helps keep you energized for your time on.

- Continuous Learning: Access a wealth of resources to grow your career and learn valuable new skills.

- Invest in Your Future: Secure your financial future through competitive pay, retirement planning, a continuing education program with a company-matched student loan contribution, and financial wellness programs.

- Family Friendly Perks: It’s not just about you. S&P Global has perks for your partners and little ones, too, with some best-in-class benefits for families.

- Beyond the Basics: From retail discounts to referral incentive awards,small perks can make a big difference.

## Skills

### Required
- Kubernetes
- JFrog Artifactory
- GitHub Enterprise
- CI/CD
- Infrastructure Automation
- Software Supply Chain Security
- Containerization
- Vulnerability Remediation
- Bash
- Python

### Nice to have
- policy-as-code
- secrets management
- runtime security tools
- artifact scanning
- SBOM practices
- open-source dependency governance
- Terraform
- Helm

---

Source: [Apply at spgi.wd5.myworkdayjobs.com](https://spgi.wd5.myworkdayjobs.com/en-US/SPGI_Careers/job/Hyderabad-Telangana/Open-Source-Supply-Chain-Engineer_332424-2?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)