Infrastructure Engineer DevSecOps, Compliance & Cloud (India)

Infrastructure Engineer DevSecOps, Compliance & Cloud Reports To: Head of Infrastructure & CRA Practice Lead Experience Level: 610 years About Us At Codvo, we are committed to building scalable, future-ready data platforms that power business impact. We believe in a culture of innovation, collaboration, and growth, where engineers can experiment, learn, and thrive. Join us to be part of a team that solves complex data challenges with creativity and cutting-edge technology. About the Role We are seeking an Infrastructure Engineer (DevSecOps & Compliance) to build and manage secure, compliant, and automated environments supporting CRA-aligned development and testing. This role focuses on designing infrastructure that embeds security, observability, and compliance automation across hybrid and multi-cloud environments (AWS, Azure, GCP, on-prem). Youll collaborate with software, security, and QA teams to implement continuous compliance, policy-as-code, and secure CI/CD practices. Key Responsibilities - Design, deploy, and manage secure CI/CD pipelines for multi-platform software development. - Implement infrastructure-as-code (IaC) using Terraform, Ansible, or Pulumi with compliance guardrails. - Integrate security scanners (SAST, SCA, DAST, IaC) into pipelines for continuous compliance. - Manage SBOM generation, artifact signing, and supply chain security automation. - Monitor and harden cloud workloads, containers, and Kubernetes clusters against vulnerabilities. - Establish observability frameworks (logging, monitoring, alerting) with compliance tagging. - Collaborate with auditors to provide infrastructure evidence for CRA, ISO 27001, and SOC 2 certifications. - Maintain compliance documentation (architecture, controls, and change logs). Required Skills & Experience - 6+ years of experience in Infrastructure, DevOps, or Cloud Engineering. - Hands-on expertise with AWS/Azure/GCP, Docker/Kubernetes, and Terraform. - Solid knowledge of CI/CD tools: Jenkins, GitHub Actions, GitLab CI, or Azure DevOps. - Familiarity with security automation and DevSecOps toolchains (Checkov, Trivy, Aqua, Snyk, OPA). - Experience implementing network and endpoint hardening, least-privilege IAM, and secret management. - Understanding of compliance frameworks (CRA, NIS2, ISO 27001, SOC 2). - Excellent scripting ability (Python, Bash, PowerShell, or Go). Preferred Qualifications - Bachelors or Masters in Computer Science, Information Security, or related field. - Certifications: AWS Security Specialty, Terraform Associate, CISSP, or CISA. - Experience with zero trust, SBOM automation, or policy-as-code environments. - Prior exposure to industrial or edge computing systems. Why Join Us Join a team defining how compliant cloud infrastructure is built and operated. Youll help global engineering teams achieve secure-by-design infrastructure through automation, resilience, and continuous compliance. Infrastructure Engineer DevSecOps, Compliance & Cloud Reports To: Head of Infrastructure & CRA Practice Lead Experience Level: 610 years About Us At Codvo, we are committed to building scalable, future-ready data platforms that power business impact. We believe in a culture of innovation, collaboration, and growth, where engineers can experiment, learn, and thrive. Join us to be part of a team that solves complex data challenges with creativity and cutting-edge technology. About the Role We are seeking an Infrastructure Engineer (DevSecOps & Compliance) to build and manage secure, compliant, and automated environments supporting CRA-aligned development and testing. This role focuses on designing infrastructure that embeds security, observability, and compliance automation across hybrid and multi-cloud environments (AWS, Azure, GCP, on-prem). Youll collaborate with software, security, and QA teams to implement continuous compliance, policy-as-code, and secure CI/CD practices. Key Responsibilities - Design, deploy, and manage secure CI/CD pipelines for multi-platform software development. - Implement infrastructure-as-code (IaC) using Terraform, Ansible, or Pulumi with compliance guardrails. - Integrate security scanners (SAST, SCA, DAST, IaC) into pipelines for continuous compliance. - Manage SBOM generation, artifact signing, and supply chain security automation. - Monitor and harden cloud workloads, containers, and Kubernetes clusters against vulnerabilities. - Establish observability frameworks (logging, monitoring, alerting) with compliance tagging. - Collaborate with auditors to provide infrastructure evidence for CRA, ISO 27001, and SOC 2 certifications. - Maintain compliance documentation (architecture, controls, and change logs). Required Skills & Experience - 6+ years of experience in Infrastructure, DevOps, or Cloud Engineering. - Hands-on expertise with AWS/Azure/GCP, Docker/Kubernetes, and Terraform. - Solid knowledge of CI/CD tools: Jenkins, GitHub Actions, GitLab CI, or Azure DevOps. -