DevSecOps Engineer – Software & AI

We're looking for a DevSecOps Engineer who can build, secure, automate, and maintain cloud infrastructure, software delivery pipelines, and AI deployment environments. This role is for someone who can ensure applications are secure, scalable, highly available, and efficiently deployed while integrating security throughout the software development lifecycle.

Responsibilities:

DevOps & Infrastructure

• Design, implement, and maintain CI/CD pipelines.
• Automate software deployment and infrastructure provisioning.
• Manage production, staging, and development environments.
• Monitor system performance, uptime, and application health.
• Optimize deployment processes to reduce release time.
• Implement Infrastructure as Code (IaC).

Cloud Management

• Deploy and manage cloud infrastructure (AWS, Azure, or Google Cloud).
• Configure networking, storage, compute resources, and load balancing.
• Manage Kubernetes clusters and containerized applications.
• Implement auto-scaling and disaster recovery strategies.
• Optimize cloud costs and resource utilization.

Security (DevSecOps)

• Integrate security throughout the software development lifecycle.
• Perform vulnerability assessments and security audits.
• Implement secrets management and secure credential handling.
• Configure Web Application Firewalls (WAF), IAM policies, and network security.
• Conduct container image scanning and dependency vulnerability analysis.
• Ensure compliance with security best practices and industry standards.

AI Infrastructure

• Deploy and maintain AI/ML applications in production.
• Support GPU-based workloads and AI model serving.
• Optimize AI deployment pipelines.
• Manage vector databases and AI infrastructure where required.
• Implement monitoring for AI services and APIs.

Automation

• Develop automation scripts using Python, Bash, or PowerShell.
• Automate infrastructure provisioning and system maintenance.
• Build monitoring and alerting solutions.
• Improve deployment reliability through automation.

Monitoring & Reliability

• Implement centralized logging.
• Configure application and infrastructure monitoring.
• Perform root cause analysis for production incidents.
• Improve system reliability and performance.

Requirements:

• 3–5 years of experience in DevOps or DevSecOps.
• Strong experience with Docker, Kubernetes, Git, GitHub Actions, GitLab CI/CD, Jenkins, and Azure DevOps Pipelines.
• Experience deploying and managing cloud infrastructure using AWS (Good to have), Microsoft Azure (Good to have), or Google Cloud Platform (GCP) (Preferred).
• Hands-on experience with Terraform, Ansible, Helm, and CloudFormation (preferred).
• Deep understanding of DevSecOps practices, OWASP Top 10, Vulnerability Management, IAM, SSL/TLS, Secrets Management, Container Security, SAST/DAST, and Security Compliance.
• Proficiency in Python, Bash, PowerShell, YAML, and JSON.
• Experience deploying AI/ML applications, including AI model deployment, LLM deployment, Hugging Face, OpenAI APIs, Vector Databases, NVIDIA GPU environments, and MLflow (preferred).
• Experience with monitoring tools including Prometheus, Grafana, ELK Stack, Loki, and Datadog (preferred).
• Advanced knowledge of Linux and basic to intermediate knowledge of Windows Server.
• Bachelor's degree in Computer Science, Software Engineering, Information Technology, or a related field.

Nice to Have:

• Experience deploying cloud-native applications.
• Experience securing production environments.
• Exposure to AI/ML deployment and infrastructure.
• Experience supporting SaaS products.
• Relevant certifications such as:
  • AWS Certified DevOps Engineer
  • AWS Solutions Architect
  • Microsoft Azure Administrator
  • Certified Kubernetes Administrator (CKA)
  • Certified Kubernetes Security Specialist (CKS)
  • HashiCorp Terraform Associate
  • CompTIA Security+
  • CISSP (Preferred)

Other Details:

• Job Timings: 9 working hours between 12 PM and 12 AM.
• Office Location: Off Shahrah-e-Faisal, PECHS, Karachi.