Senior Manager

A Position Overview Position Title DevSecOps Engineer Architect Department IT Level Band Sr Manager AVP Role Summary The role has overall responsibility of enablement of automation and security at each level for all business requirement of Life Insurance sales channels Operations HR Finance and other functions to meet the business objective He should prepare technical solution design specification to implement the automation and security integration for all business requirements and take the ownership to get that implemented Perform competitive analysis for security vulnerability checks and identify best suitable tool that may help in faster automation in on-prem as well as cloud and dissolving vulnerability issue The role needs the candidate to understand Insurance domain mentor the team and collaborate with application and integration teams to enable security integration for identify vulnerability at code level host level and patch level as well as identify any kind of ransomware malware Trojan horses in all the running environments Role needs to support project managers integration design design reviews for proactive monitoring fail safe performant and secure the applications with project delivery objectives Support project engagement product enhancements and new development by understanding business requirements and performing competitive analysis for of the development of integrations As a Sr DevSecOps Engineer provide technical and consultative guidance to the application teams and setup CI CD CT jobs with enablement of security and automation on a range of complex engagements and deliver the vulnerability free solution Good exposure to DevSecOps with terminology for SCA SAST DAST IAST tools Security compliance initiatives governance automation skills that helps in enabling the security standards at different levels of environments Leading the implementation of small mid and large engagements Execution of high complex internal partner consulting services based on best practices Proposing problem solving activities and approaches for dynamic customer challenges within project engagements Possess foundational working knowledge of IT industry best practices and Well-Architected frameworks having clear visibility of overview and projections scope Improving the overall service business by identifying internal process improvements training and opportunities Expert guidance to team for setting up architectural runway with security integration to provide support for business teams Partners and ensuring solution strategy is optimally aligned B Organizational Relationships Reports to VP - Information Technology Supervises Individual Contributor C Job Dimensions Geographic Area Covered Pan India Stakeholders Internal All Departments External IT DC Vendors D Key Result Areas Project Delivery Management Assist application teams on technical and automate functions on SCA SAST DAST and IAST Identify the security vulnerabilities and help app team to get it fixed to accelerate solution delivery Identify areas of automation and security enablement as per current standards and technology innovations are in place Identify the Solution for Infra as Code Security as Code Configuration as Code Policy as Code and availability of environment as per business requirement if business requirement changes the suggested model should support changes as well Act as interface between Application delivery team on security standards meets without interfering the application functionality and performance Solution architecture Contributes to the development of solution architectures in specific business automation testing or security areas Focuses on application security vulnerability checks high availability scalability and fault tolerance for faster delivery and monkey chaos mechanism Produces specifications of cloud-based or on-premises components tiers and interfaces for translation into detailed designs using selected services and products for automation process Supports a change program or project through the preparation of technical plans and application of design principles that comply with enterprise and solution architecture standards including security Systems design Be a key member of an Agile team collaboratively realizing features through the software development lifecycle Guide and participate in design development unit testing and deployment of life insurance products and services including enhancements and or resolution of any issues that may be reported Investigate and resolve complex customer issues Work independently with a minimal level of guidance from technical leadership Mentor other devsecops engineers including design collaboration and code reviews Research validate and recommend technology decisions for new features Develops automation scripts and App engines to automate the governance of application management security workflows Updates and creates Azure cloud-native rulesets around security governance and industry best-practices Systems integration and build Provides technical expertise to enable the configuration of software other system components and equipment for systems testing Collaborates with technical teams to develop and agree system integration plans and report on progress Collaborates with technical teams to get resolved the security vulnerability issues automation issues and report on progress Defines complex new integration builds Ensures that development and integration test environments are correctly configured and reports are generated correctly for SAST DAST Designs the automation for unit test coverages report of the integration builds Identifies and documents system integration components for recording in the configuration management system Recommends and implements improvements to processes and tools for devsecops Risk Management and Mitigation Analyse Process and systems to mitigate risk and provide solutions for non-stated functional requirements Ensure all IT design and architecture risks are managed Managing the Team Review provided to technical integration database artifact deployment source code automation and security point of view if required Mentor to the application development team on appropriate use of architecture NodeJS Angular Java J2EE and SOA design patterns Mentoring the team on technical and business-related areas in any aspect of the application development enhancement or redesigning Help in coordination between different verticals of IT DC Team Being a Leader create path process and get it implemented correctly over a specific maturity level process needs to be handover to execution teams Misc Ensure compliance to AIA and TALIC rules and standards Constantly align with the IT team Vendor team and business stakeholder E Skills Required Technical Relevant experience into Linux administration and good knowledge of commands and performance improvement for Linux machines Relevant experience in getting implemented the DevSecOps as a culture across the organization understand the DevSecOps SCA SAST DAST tools Security compliance initiatives governance automation skills Relevant Experience in Implementing infrastructure as code using hasicorp Terraform Relevant experience in Jenkins Docker Kubernetes Helm ServiceMesh APIGateway Vault Relevant experience working with On-prem and Azure public cloud or any other cloud AWS GCP for implementing SAST DAST IAST using Snyk StackHawk Relevant Experience in managing Azure Repo s as Code Repository management user management and overall administration of Azure Devops Server Relevant Experience in Database Management and Query execution using Jenkins Flyway or Liquibase plugins Fundamental experience with Azure cognitive services ML AI etc Azure DevOps and Azure Data Databases Ability to effectively manage complex relationships A communication style which positively impacts Flexibility resilience Ability and willingness to challenge constructively and effectively Good communication skills University bachelor s degree or preferably with an Engineering degree in Computers or IT Technology Technical Skill Behavioral Essential Desired Interpersonal skills Communication skills Creative thinking skills Supervising Leadership skills Teamwork Skills Influencing skills Relationship Building skills Decision making skills F Incumbent Characteristics Essential Desired Qualification B E B Tech MCA Docker Certified Administrator Certified Kubernetes Administrator Any Certification is a plus Experience 8 - 12 years of DevSecOps Azure Cloud Code Security application monitoring and Realtime deployment architecture experience DevSecOps using SAST DAST and IAST using Snyk StackHawk Veracode Checkmarx DevSecOps using Infra as Code Configuration as Code Security as Code Policy as Code DevOps tools implementation for CI CD CT Good interpersonal and communication skills with ability to build productive relationships across the participants in the ecosystem Knowledge of IBM WebSphere Application Server Portal Server and Liberty Server File Net JMS will be plus