Azure DevOps Engineer in London

• Role: Azure Dev Ops Engineer
• Employment: Fulltime

Role overview

This is an excellent opportunity for Azure Dev Secop S professionals to be part of leading-edge technology projects.

Cognizant’s Cloud, Infrastructure & Security Services Practice provides end-to-end solutions covering architecture, design, implementation, management, and on-going support across the entire enterprise technology infrastructure.

Our services include a spectrum of management, consulting, and systems integration services to help our clients maximize value in their infrastructure resources, while optimizing infrastructure performance and cost.

• Roles and Responsibilities
• Design, build and maintain secure CI/CD pipelines in Azure Dev Ops to deploy Azure resources, applying Dev Ops and Git Ops principles.
• Secure Azure Dev Ops repositories and pipelines, and define and enforce quality gates and deployment best practices.
• Integrate SAST, SCA, DAST and container security scanning into CI/CD pipelines to embed security across the SDLC.
• Identify, classify and evaluate vulnerabilities against the environment, and drive their mitigation in line with security best practices.
• Proactively identify security gaps across infrastructure, network and applications, and strengthen the overall security posture.
• Design and propose security solutions aligned with Zero Trust principles, covering CASB, cloud computing, SIEM, SOAR, IAM, PAM, Azure Active Directory and SSO.
• Implement and manage cloud-native security and monitoring tools, including Log Analytics, Azure Monitor, Azure Security Center, Azure Defender and Azure Sentinel, to detect and alert on security threats.
• Implement Azure Policy and Azure Monitor for security governance and compliance, ensuring alignment with regulatory requirements, risk and control frameworks.
• Required Skills
• Hands-on experience with Azure Sentinel (SIEM) is mandatory.
• Hands-on experience as an engineer or architect with on-premises and/or public cloud technologies, specifically Microsoft Azure.
• Strong knowledge of Azure security best practices and services, including Azure Container Registry, Azure Defender, Azure Policy, and Azure Monitoring and alerts.
• Solid understanding of Dev Ops and Git Ops concepts, with experience in Azure Dev Ops Repos and Pipelines and their security.
• Strong understanding of SAST, SCA and DAST, with hands-on experience integrating security scanning tools into CI/CD pipelines.
• Extensive experience implementing security across the SDLC, including container security.
• Sound knowledge of vulnerability management – identification, classification, risk evaluation and remediation.
• Broad security background across infrastructure, network and application security.
• Good understanding of regulatory requirements, risk management and security controls.
• Ability to design and propose security solutions and architectures.
• Good to Have

Familiarity with security and compliance scanning tools such as Checkov (infrastructure), Git Hub Advanced Security (code), Sonar Qube and Burp Suite, or similar tools