Azure DevOps engineer in cloud security

This is an excellent opportunity for Azure DevSecopS professionals to be part of leading-edge technology projects. Cognizant’s Cloud, Infrastructure & Security Services Practice provides end-to-end solutions covering architecture, design, implementation, management, and on-going support across the entire enterprise technology infrastructure. Our services include a spectrum of management, consulting, and systems integration services to help our clients maximize value in their infrastructure resources, while optimizing infrastructure performance and cost.

• Design, build and maintain secure CI/CD pipelines in Azure DevOps to deploy Azure resources, applying DevOps and GitOps principles.
• Secure Azure DevOps repositories and pipelines, and define and enforce quality gates and deployment best practices.
• Integrate SAST, SCA, DAST and container security scanning into CI/CD pipelines to embed security across the SDLC.
• Identify, classify and evaluate vulnerabilities against the environment, and drive their mitigation in line with security best practices.
• Proactively identify security gaps across infrastructure, network and applications, and strengthen the overall security posture.
• Design and propose security solutions aligned with Zero Trust principles, covering CASB, cloud computing, SIEM, SOAR, IAM, PAM, Azure Active Directory and SSO.
• Implement and manage cloud-native security and monitoring tools, including Log Analytics, Azure Monitor, Azure Security Center, Azure Defender and Azure Sentinel, to detect and alert on security threats.
• Implement Azure Policy and Azure Monitor for security governance and compliance, ensuring alignment with regulatory requirements, risk and control frameworks.

• Hands-on experience with Azure Sentinel (SIEM) is mandatory.
• Hands-on experience as an engineer or architect with on-premises and/or public cloud technologies, specifically Microsoft Azure.
• Strong knowledge of Azure security best practices and services, including Azure Container Registry, Azure Defender, Azure Policy, and Azure Monitoring and alerts.
• Solid understanding of DevOps and GitOps concepts, with experience in Azure DevOps Repos and Pipelines and their security.
• Strong understanding of SAST, SCA and DAST, with hands-on experience integrating security scanning tools into CI/CD pipelines.
• Extensive experience implementing security across the SDLC, including container security.
• Sound knowledge of vulnerability management – identification, classification, risk evaluation and remediation.
• Broad security background across infrastructure, network and application security.
• Good understanding of regulatory requirements, risk management and security controls.
• Ability to design and propose security solutions and architectures.
• Будет плюсом: Familiarity with security and compliance scanning tools such as Checkov (infrastructure), GitHub Advanced Security (code), SonarQube and Burp Suite, or similar tools

• Условий в вакансии нет