DevSecOps Engineer

The Senior DevSecOps Engineer is a hands-on Senior DevOps Engineer with focused responsibility for integrating security into cloud infrastructure, delivery pipelines, developer workflows, and production platform practices across F&P Solutions. The role combines broad AWS, Kubernetes/EKS, Infrastructure as Code, CI/CD, automation, and troubleshooting capability with deep expertise in IAM governance, vulnerability and open-source scanning, static analysis, policy as code, software supply chain security, cloud and container security, and automated compliance evidence. The job holder enables product teams to deliver securely by translating enterprise requirements into practical, reusable controls rather than relying on manual reviews or end-stage security gates. The role works closely with Product, Development, Architecture, Security, BISO, Quality, SRE, cloud service owners, and compliance stakeholders, bringing strong communication, sound judgment, and end-to-end ownership.

What You'll do

Senior DevOps engineering foundation: Design, build, and improve reliable, scalable, and automated AWS, Kubernetes/EKS, Infrastructure as Code, and CI/CD capabilities while applying security as an integrated engineering requirement.
DevSecOps capability ownership: Drive practical adoption of secure software delivery practices across product teams, translating enterprise security, architecture, and compliance requirements into reusable engineering controls and implementation patterns.
Secure CI/CD and policy enforcement: Embed automated security checks, approvals, evidence, and policy enforcement into GitLab CI/CD and related delivery workflows while keeping controls understandable, maintainable, and proportionate to risk.
Application and dependency security: Implement and improve static analysis, software composition and open-source dependency scanning, vulnerability detection, secrets detection, artifact controls, and actionable remediation workflows using approved tools.
Software supply chain security: Strengthen provenance, artifact integrity, dependency governance, build security, access boundaries, and traceability across source, pipeline, registry, deployment, and runtime stages.
IAM governance and automation: Engineer reusable IAM patterns, least-privilege controls, role and access lifecycle automation, secrets/configuration management, access reviews, and evidence collection across AWS and delivery platforms.
Cloud, container, and infrastructure security: Implement secure AWS, Kubernetes/EKS, network, workload, container, and Infrastructure as Code patterns, including scanning, hardening, admission controls, policy as code, and remediation automation.
Vulnerability remediation enablement: Partner with product teams and security stakeholders to triage findings, clarify ownership and risk, prioritize remediation, remove false-positive noise, track exceptions, and drive high-value actions to verified closure.
Compliance and audit readiness: Automate control evidence where practical, improve traceability, support ISO 27001 and related assurance needs, and maintain clear documentation for security controls, exceptions, decisions, and remediation status.
Security enablement and influence: Coach engineers, create practical standards and examples, facilitate threat-aware design and secure delivery discussions, and influence teams without becoming a manual approval bottleneck.
Operational security partnership: Support investigation and long-term corrective actions for security-related production issues in partnership with SRE, Architecture, Security, and responsible product teams.
Other duties: Perform other related duties as needed or assigned.

What You’ll Bring

Five or more years of experience in DevOps, cloud, platform, infrastructure, security, or software engineering environments.
Experience working in an enterprise or global organization with distributed teams.
Experience collaborating with security, compliance, enterprise architecture, cloud platform, SRE, vendor, and product teams.
Experience with Datadog, CloudWatch, SonarQube/SonarQ, JFrog, Veracode, LaunchDarkly, Helm, Ansible, secrets management, or similar platforms.
Familiarity with application stacks such as PostgreSQL, .NET, Angular, APIs, or cloud-native microservices.
Relevant AWS, Kubernetes, Terraform, DevOps, platform engineering, or security certifications.
Experience mentoring engineers, raising technical standards, and enabling adoption through documentation, coaching, reusable examples, and hands-on collaboration.
Experience supporting ISO 27001, audit readiness, secure software development lifecycle practices, or regulated environments.
Experience with Veracode, SonarQube/SonarQ, JFrog, GitLab security capabilities, AWS security services, Open Policy Agent, Gatekeeper, or equivalent tools.
Familiarity with threat modeling, security architecture reviews, SBOM, artifact signing, provenance, or supply chain security frameworks.
Relevant cloud security, DevSecOps, application security, Kubernetes security, or information security certifications.

What’s In It for You

Normal office and hybrid working conditions in Pune, India.
Up to 20% domestic and international travel, as required.
Occasional work outside normal business hours may be required for priority security events, production support, or planned changes.

Why Hilti

Hilti is a global leader in construction innovation, with more than 34,000 team members across 120 countries. Guided by our purpose, Making Construction Better, we’re driven to keep learning, growing, and finding new ways to make a lasting impact. Here, you’ll be empowered to use your strengths, work with a global and inclusive team, and take on meaningful challenges. At Hilti, you’ll have the chance to make your ideas, achievements, and growth real through purpose, passion, and teamwork.

Commitment to Inclusion

At Hilti, inclusion is a key focus in how we work, lead, and grow together. We are committed to embracing diversity of thought and creating an environment that is inclusive of everyone, everywhere. We continuously strive to ensure every voice is valued and every team member feels empowered to contribute. By building on this foundation, we strengthen our teams, our innovation, and our impact, making construction better together.

DevSecOps Engineer