Sr. Associate I, Product Development, Security

Summary:

The role is responsible for designing, implementing, and maintaining secure, scalable, and automated infrastructure and CI/CD pipelines. This role collaborates with development, QA, and operations teams to integrate security throughout the software development lifecycle, leveraging leading tools and cloud platforms. The engineer will also lead and support migration efforts of applications and tooling between various platforms.

Key Responsibilities:

- Design, build, and maintain automated CI/CD pipelines using Azure DevOps, incorporating security controls at every stage.
- Apply advanced expertise in Infrastructure as Code (IaC) to provision, manage, and scale cloud infrastructure reliably and securely. Champion and enforce IaC best practices across all environments, driving efficiency, consistency, and repeatability using tools such as Terraform.
- Integrate security scanning and compliance checks using SonarCloud, JFrog Xray, and Veracode within build and release pipelines.
- Architect and manage cloud resources following AWS best practices for security, scalability, and cost optimization.
- Set up and manage artifact repositories with JFrog, implement code quality gates with SonarCloud, and enforce vulnerability management procedures.
- Lead or support migration of applications, tooling, and pipelines between platforms such as BitBucket/Jenkins/Code Build/Code Deploy to Azure DevOps, and legacy to modern security solutions, ensuring minimal disruption and data integrity.
- Utilize Docker to containerize applications for consistency across development, testing, and production environments.
- Deploy, manage, and troubleshoot containerized applications using Kubernetes in production and staging environments.
- Collaborate with Security and Operations teams on incident response and conduct detailed analysis.

Key Requirements/Minimum Qualifications:

- Total of 5 - 8 years of experience.
- Minimum of 5 years' experience in DevOps or DevSecOps roles with hands-on involvement in secure CI/CD pipeline design and implementation.
- Deep understanding and hands-on experience with Infrastructure as Code (IaC), especially with Terraform. Proven ability to architect, implement, and maintain IaC-driven solutions in production cloud environments.
- Experience with Azure DevOps pipelines.
- Experience with SonarCloud for code analysis and quality gates.
- Experience in working with JFrog Artifactory and Xray for artifact management and vulnerability scanning.
- Experience in working with Veracode for code security scanning and analysis.
- Strong experience with AWS, including IAM, networking, security groups, and provisioning.
- Demonstrated experience migrating applications, pipelines, or tooling between DevOps platforms, cloud providers, or security toolchains.
- Practical experience with Docker for developing, packaging, and deploying containerized applications.
- Experience deploying and managing applications with Kubernetes.
- Proficiency in scripting languages such as Python, Bash, or PowerShell for automation tasks.
- Knowledge of DevSecOps principles, vulnerability management, and security integration in CI/CD processes.
- Proven ability to work collaboratively in cross-functional teams and mentor junior engineers.

Work hours: 1 PM to 10 PM IST

Relocation assistance: Yes

Employment Scams: Alcon is aware of employment scams which make false use of our company name or leader's names to defraud job seekers. Alcon does not offer any positions without interview and never asks candidates for money. All our current job openings are displayed here on the Careers section of our website, where you can search for open positions and apply directly.

If you have encountered a job posting or been approached with a job offer that you suspect may be fraudulent, we strongly recommend you do not respond, send money or personal information, and check our website for current job openings.

ATTENTION: Current Alcon Employee/Contingent Worker

If you are currently an active employee/contingent worker at Alcon, please click the appropriate link below to apply on the Internal Career site.

Find Jobs for Employees

Find Jobs for Contingent Worker

Alcon is an Equal Opportunity Employer and takes pride in maintaining a diverse environment. We do not discriminate in recruitment, hiring, training, promotion or other employment practices for reasons of race, color, religion, gender, national origin, age, sexual orientation, gender identity, marital status, disability, or any other reason.