Principal Infrastr Eng

Job Title: Senior DevSecOps Engineer

Department: PI Germany

About Business line/Function: ITG – Personal Investors IT

Position Purpose: We are looking for a Senior DevSecOps Engineer to design, build, and continuously improve our CI/CD pipelines with a strong emphasis on security, quality, and automation. In this role, you will be the driving force behind integrating security scanning, vulnerability management, and quality enforcement directly into the software delivery lifecycle. You will collaborate closely with development, architecture, and security teams to ensure that every release meets the highest standards of quality and compliance.

Responsibilities

Direct Responsibilities

• Design, implement, and maintain end-to-end CI/CD pipelines in GitLab CI, ensuring reliability, performance, and security at every stage.
• Integrate and manage artifact repositories using JFrog Artifactory, including artifact staging, promotion workflows, and lifecycle policies.
• Configure and maintain SonarQube for static code analysis, enforcing quality gates that block non-compliant code from progressing through the pipeline.
• Implement and optimize unit test automation frameworks and ensure seamless integration of test execution and reporting within CI/CD pipelines.
• Build and enforce quality gates across all pipeline stages, incorporating code coverage thresholds, code smell limits, security vulnerability checks, and architectural compliance.
• Integrate vulnerability management tooling such as Nexus IQ (Software Composition Analysis) and Fortify (Static Application Security Testing) into pipelines and quality gates.
• Define and manage artifact staging strategies to ensure controlled and traceable promotion of build artifacts from development through to production.
• Collaborate with development and architecture teams to establish and enforce DevSecOps best practices across the organization.
• Monitor, troubleshoot, and continuously improve pipeline performance, reliability, and security posture.
• Document pipeline architectures, runbooks, and operational procedures to ensure knowledge sharing and team enablement.

Contributing Responsibilities

• 7+ years of professional experience in DevOps, DevSecOps, or a related infrastructure/platform engineering role.
• Strong hands-on experience with GitLab CI/CD, including pipeline design, optimization, and administration.
• Proven experience with JFrog Artifactory for artifact management, repository configuration, and artifact staging/promotion workflows.
• In-depth knowledge of SonarQube for static code analysis, including rule configuration, quality profiles, and quality gate definition.
• Solid experience in unit test automation and integration of test frameworks (e.g., JUnit, NUnit, Jest) into CI/CD pipelines with automated reporting.
• Demonstrated experience implementing and managing quality gates within CI/CD pipelines, including enforcement of code quality, coverage, and security thresholds.
• Hands-on experience with vulnerability management tools integrated into pipelines, specifically Sonatype Nexus IQ (Software Composition Analysis) and Micro Focus / OpenText Fortify (SAST).
• Strong understanding of artifact staging concepts and controlled promotion strategies across environments (Dev, QA, Staging, Production).
• Excellent understanding of DevSecOps principles, shift-left security, and secure software development lifecycle (SSDLC) practices.
• Strong scripting and automation skills (e.g., Bash, Python, or Groovy).
• Excellent communication and collaboration skills, with the ability to work effectively in cross-functional teams.

Technical & Behavioral Competencies

• Experience with release orchestration platforms such as Release (formerly XL Release), including pipeline modeling, release tracking, and environment management.
• Familiarity with quality enforcement tools and architectural compliance methods in pipelines, such as ArchLint, SonarLint, or custom linting rules integrated into IDE and CI workflows.
• Experience with container orchestration platforms (e.g., Kubernetes, OpenShift) and infrastructure-as-code tools (e.g., Terraform, Ansible).
• Knowledge of compliance frameworks (e.g., ISO 27001, SOC 2) and how to embed compliance checks into automated pipelines.
• Experience with monitoring and observability tools (e.g., Prometheus, Grafana, ELK Stack) for pipeline and infrastructure health.
• Relevant certifications such as GitLab Certified CI/CD Associate, Certified Kubernetes Administrator (CKA), or security-related certifications (e.g., CompTIA Security+, CISSP).

Specific Qualifications:

Skills Referential (Required knowledge, skills and abilities)

Technical Skills:

• • DevOps, DevSecOps
  • GitLab CI/CD
  • Pipeline modeling, release tracking, and environment management
  • orchestration platforms (e.g., Kubernetes, OpenShift)

Behavioral Skills:

• • Ability to collaborate
  • Ability to Deliver/results driven.

Education Level: Bachelor’s degree or Equivalent

Location: Chennai

About Clients Group:

Client is the European Union’s leading bank and key player in international banking. It operates in 65 countries and has nearly 185,000 employees, including more than 145,000 in Europe. The Group has key positions in its three main fields of activity: Commercial, Personal Banking & Services for the Group’s commercial & personal banking and several specialized businesses including Personal Finance and Arval; Investment & Protection Services for savings, investment, and protection solutions; and Corporate & Institutional Banking, focused on corporate and institutional clients. Based on its strong diversified and integrated model, the Group helps all its clients (individuals, community associations, entrepreneurs, SMEs, corporates and institutional clients) to realize their projects through solutions spanning financing, investment, savings and protection insurance. In Europe, Clienthas four domestic markets: Belgium, France, Italy, and Luxembourg. The Group is rolling out its integrated commercial & personal banking model across several Mediterranean countries, Turkey, and Eastern Europe. As a key player in international banking, the Group has leading platforms and business lines in Europe, a strong presence in the Americas as well as a solid and fast-growing business in Asia-Pacific. Client has implemented a Corporate Social Responsibility approach in all its activities, enabling it to contribute to the construction of a sustainable future, while ensuring the Group's performance and stability.

About Client’s India Solutions:

Established in 2005, client’s India Solutions is a wholly owned subsidiary of client’sSA, European Union’s leading bank with an international reach. With delivery centers located in Bengaluru, Chennai and Mumbai, we are a 24x7 global delivery center. India Solutions services three business lines: Corporate and Institutional Banking, Investment Solutions and Retail Banking for clientacross the Group. Driving innovation and growth, we are harnessing the potential of over 10000 employees, to provide support and develop best-in-class solutions.

Commitment to Diversity and Inclusion

We passionately embrace diversity and are committed to fostering an inclusive workplace where all employees are valued, respected and can bring their authentic selves to work. We prohibit Discrimination and Harassment of any kind and our policies promote equal employment opportunity for all employees and applicants, irrespective of, but not limited to their gender, gender identity, sex, sexual orientation, ethnicity, race, colour, national origin, age, religion, social status, mental or physical disabilities, veteran status etc. As a global Bank, we truly believe that inclusion and diversity of our teams is key to our success in serving our clients and the communities we operate in. As a global Bank, we truly believe that inclusion and diversity of our teams is key to our success in serving our clients and the communities we operate in.