DevSecOps Engineer

About Tarento:

Tarento is a fast-growing technology consulting company headquartered in Stockholm, with a strong presence in India and clients across the globe. We specialize in digital transformation, product engineering, and enterprise solutions, working across diverse industries including retail, manufacturing, and healthcare. Our teams combine Nordic values with Indian expertise to deliver innovative, scalable, and high-impact solutions.

We're proud to be recognized as a Great Place to Work, a testament to our inclusive culture, strong leadership, and commitment to employee well-being and growth. At Tarento, you'll be part of a collaborative environment where ideas are valued, learning is continuous, and careers are built on passion and purpose.

Job Title: DevSecOps Engineer (AWS | Container Orchestration)

-

Job Summary:

We are hiring an experienced DevSecOps Engineer with strong expertise in AWS Cloud, container orchestration (Kubernetes / ECS etc.), and secure CI/CD deployments.

The ideal candidate will manage and optimize application deployments, troubleshoot production issues, and apply DevOps and security best practices to ensure high availability, scalability, reliability, and compliance of our cloud workloads.

-

Key Responsibilities:

• This role is hands-on and operational — focused on running, securing, and stabilizing production systems.
• Manage and optimize application deployments across AWS EKS, ECS, and EC2 environments.
• Oversee production operations, incident management, and root cause analysis (RCA) for critical issues.
• Implement and maintain CI/CD pipelines using Jenkins, GitLab CI, GitHub Actions, or AWS CodePipeline.
• Ensure secure deployment processes through integrated scanning tools (Snyk, Trivy, SonarQube, rapid7) and vulnerability management.
• Implement & Monitor system health using CloudWatch, Prometheus, Grafana, and ELK, ensuring proactive alerts and observability.
• Administer and manage AWS services including S3, EC2, ECR, ECS, EKS, Lambda (serverless), SNS, SES, and Secrets Manager.
• Configure and secure networking components — VPC, subnets, route tables, NAT gateways, security groups, load balancers (ALB/NLB), CloudFront, API Gateway, and WAF.
• Enforce AWS IAM and network security best practices, including least-privilege policies and secure key management.
• Collaborate with development and QA teams to optimize application performance, reliability, and security posture.
• Drive and promote a "Security by Design" mindset and SRE-driven reliability culture within the DevOps ecosystem.

-

Required Technical Skills:

• Proven hands-on experience managing AWS production environments — EKS, ECS, EC2, S3, CloudFront, API Gateway, WAF, SNS, SES, Secrets Manager, CloudWatch, VPC, IAM.
• Strong understanding of containerization (Docker) and container orchestration (Kubernetes / ECS).
• Proficiency with CI/CD tools — Jenkins, GitLab CI, GitHub Actions, AWS CodePipeline.
• Strong networking knowledge — VPC design, subnets, DNS, routing, SSL/TLS, load balancing, and firewall rules.
• Experience implementing DevSecOps practices — scanning, policy enforcement, and compliance monitoring.
• Skilled in troubleshooting across infrastructure, networking, and application layers.
• Experience with monitoring and alerting stacks — Prometheus, Grafana, ELK, CloudWatch.
• Scripting experience using Bash, Python, YAML, and JSON.

-

Good to Have:

• Certifications such as AWS Certified DevOps Engineer, CKA / CKAD, or AWS SysOps Administrator.
• Familiarity with service mesh (Istio / App Mesh) and policy-as-code tools (OPA, Kyverno).
• Experience with runtime security platforms (Falco, Aqua, Prisma Cloud).
• Terraforms, CloudFormation for deployment automation.
• Knowledge of Zero Trust architecture and AWS Security Hub / GuardDuty.
• Exposure to incident response automation or resilience engineering practices.