We’re looking for a DevSecOps Engineer to own the security, reliability, and delivery of our Azure platform and Kubernetes workloads. You’ll be the hands‑on technical engineer for secure‑by‑default infrastructure—automating everything‑as‑code, and partnering with product teams to do deployment and enabling fast shipping of codes without trading off security or resilience.

• Build and evolve Azure Landing Zones, Management Group hierarchy, subscription vending, and policy‑as‑code guardrails using Azure Policy or equivalent tools.
• Design & operate private AKS clusters (Azure CNI/Calico etc), implement Pod Security Standards, network policies (Calico/Cilium), workload identity (Entra OIDC/Workload Identity), and secure ingress/egress.
• Standardize pipelines in GitHub Actions / Azure DevOps; enforce SBOM, image scanning, cosign signing/verification, provenance (SLSA‑aligned) and immutable deploys (GitOps with Argo CD/Flux).
• Imp...