Staff Engineer, DevOps

📋 Job Overview

Staff Engineer, DevOps - DevsecOps at Tekion, Bangalore HQ. Full-time position in Engineering, Dev Ops department.

🏢 About Tekion

Tekion has challenged the paradigm with the first and fastest cloud-native automotive platform that includes the revolutionary Automotive Retail Cloud (ARC) for retailers, Automotive Enterprise Cloud (AEC) for manufacturers and other large automotive enterprises and Automotive Partner Cloud (APC) for technology and industry partners. Tekion connects the entire spectrum of the automotive retail ecosystem through one seamless platform. The transformative platform uses cutting-edge technology, big data, machine learning, and AI to seamlessly bring together OEMs, retailers/dealers and consumers. With its highly configurable integration and greater customer engagement capabilities, Tekion is enabling the best automotive retail experiences ever. Tekion employs close to 3,000 people across North America, Asia and Europe.

🎯 The Role

Security Integration: Embed security best practices across the software development lifecycle (SDLC), from code commit to deployment, ensuring "security by design." Collaboration: Work closely with Cloud Security and Product Security teams to develop and enforce security standards, policies, and frameworks. Infrastructure Hardening: Implement and automate security controls across AWS/Azure/GCP resources, Kubernetes clusters, containers, and other infrastructure components. CI/CD Security: Integrate automated security testing, static and dynamic analysis, and vulnerability scanning into CI/CD pipelines. Threat Detection & Incident Response: Develop and maintain monitoring/alerting for security incidents; participate in incident triage, root cause analysis, and response efforts. Tooling & Automation: Build and maintain automation for compliance checks, secrets management, access controls, patching, and audit logging. Governance: Ensure the team’s infrastructure and deployments are compliant with industry regulations and Tekion’s internal security requirements. Continuous Improvement: Stay current with emerging threats, vulnerabilities, and security best practices; propose and implement relevant improvements. Evangelism: Foster a security-first mindset within DevOps and engineering teams through knowledge sharing, documentation, and training.

✅ Key Responsibilities

• Security Integration: Embed security best practices across the software development lifecycle (SDLC), from code commit to deployment, ensuring "security by design".
• Collaboration: Work closely with Cloud Security and Product Security teams to develop and enforce security standards, policies, and frameworks.
• Infrastructure Hardening: Implement and automate security controls across AWS/Azure/GCP resources, Kubernetes clusters, containers, and other infrastructure components.
• CI/CD Security: Integrate automated security testing, static and dynamic analysis, and vulnerability scanning into CI/CD pipelines.
• Threat Detection & Incident Response: Develop and maintain monitoring/alerting for security incidents; participate in incident triage, root cause analysis, and response efforts.
• Tooling & Automation: Build and maintain automation for compliance checks, secrets management, access controls, patching, and audit logging.
• Governance: Ensure the team’s infrastructure and deployments are compliant with industry regulations and Tekion’s internal security requirements.
• Continuous Improvement: Stay current with emerging threats, vulnerabilities, and security best practices; propose and implement relevant improvements.
• Evangelism: Foster a security-first mindset within DevOps and engineering teams through knowledge sharing, documentation, and training.

📌 Required Qualifications

• Bachelor’s degree in computer science, Engineering, or a related technical field, or equivalent practical experience.
• 8+ years of experience in DevOps, Site Reliability Engineering, or Security Engineering roles.
• Solid hands-on experience with cloud infrastructure (AWS/GCP/Azure).
• Deep understanding of secure infrastructure design, identity and access management, network security, and related best practices.
• Experience securing container platforms (Docker, Kubernetes) and modern CI/CD toolchains (e.g., Jenkin, Tekton, GitHub actions, ArgoCD).
• Proficiency in at least one scripting/programming language (Python, Go, etc.) and strong automation skills.
• Practical familiarity with vulnerability management, scanning, threat modelling, and remediation workflows.
• Strong collaboration, communication, and documentation abilities.

⭐ Desirable Experience

• Experience with security automation frameworks and tools.
• Knowledge of security compliance standards (e.g., ISO 27001, SOC 2, PCI DSS).
• Experience with security incident response and digital forensics.
• Understanding of DevSecOps principles and practices.

🎁 Benefits

Opportunity to work with some of the smartest minds to solve complex security challenges at scale. Impactful role in shaping and securing a global, cloud-native & AI driven platform. Innovative, collaborative, and fast-paced culture.

🛂 Visa & Eligibility

Tekion is proud to be an Equal Employment Opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, victim of violence or having a family member who is a victim of violence, the intersectionality of two or more protected categories, or other applicable legally protected characteristics.