DevOps & Security Engineer

Job Description: DevOps & Security Engineer About Mensa Technology Platform Mensa Technology Platform is a highly scalable, robust, and intelligent platform serving multiple brands across marketplaces and D2C channels in India and globally. As part of the engineering and platform team, you will play a critical role in building secure, scalable, and compliant infrastructure that powers high growth eCommerce operations. This role combines DevOps, cloud infrastructure, platform security, governance, and automation. You will work closely with Engineering, Product, Data, and Security teams to embed security and operational excellence across the software development lifecycle. Key Responsibilities DevOps & Platform Engineering Design, implement, and manage scalable cloud infrastructure across AWS, Azure, and GCP environments. Build and maintain CI/CD pipelines using GitHub Actions, GitLab CI, and Jenkins. Manage containerized workloads using Docker and Kubernetes. Implement Infrastructure as Code using Terraform and CloudFormation. Improve platform reliability, scalability, deployment velocity, and operational efficiency. Setup monitoring, logging, alerting, and observability frameworks for infrastructure and applications. Security Engineering & DevSecOps Implement Shift Left Security practices by integrating automated security testing into CI/CD pipelines. Configure and manage SAST, DAST, dependency scanning, and container security scanning tools. Design and enforce least privilege Identity and Access Management policies. Manage secrets, encryption keys, certificates, and secure authentication systems. Ensure Kubernetes workloads follow security best practices including Pod Security Standards and network policies. Implement and manage cloud security tools such as: AWS Security Hub, KMS, IAM Identity Center Microsoft Defender for Cloud, Azure Key Vault Google Cloud security services Identify vulnerabilities, security gaps, and potential attack vectors proactively. Setup incident response workflows, security monitoring, and automated remediation processes. Governance, Compliance & Operations Define and enforce data governance processes and security policies across the organization. Drive compliance initiatives related to ITGC, audit readiness, and security standards. Ensure infrastructure and systems comply with internal security baselines and regulatory requirements. Collaborate with Engineering, Data, DevOps, and Security teams to ensure seamless operations. Promote cybersecurity awareness and secure engineering practices across teams. Desired Skills and Experience 4 to 10 years of experience in DevOps, Platform Engineering, Security Engineering, or DevSecOps roles. Strong hands on experience with AWS cloud services. Exposure to Azure and GCP is preferred. Expertise in Kubernetes, Docker, and container orchestration security. Strong experience with Terraform, CloudFormation, or similar IaC frameworks. Experience implementing CI/CD pipelines using GitHub Actions, GitLab CI, or Jenkins. Strong understanding of IAM, secrets management, RBAC, encryption, and authentication systems. Hands on experience with vulnerability management and security scanning tools. Good understanding of ITGC controls, audit processes, and compliance frameworks. Experience with logging, monitoring, SIEM, and incident response systems. Strong scripting or programming skills in Python, Bash, PowerShell, Java, or JavaScript. Familiarity with service mesh technologies such as Istio is a plus. Strong problem solving, automation, and debugging skills. Excellent communication and collaboration skills with cross functional teams. Why Join Us You will have the opportunity to build secure and scalable cloud infrastructure for a rapidly growing global eCommerce platform. This role offers significant ownership, exposure to modern cloud native technologies, and the ability to shape security and operational excellence across the organization.