DevSecOps Engineer 7 to 9 years of experience

Founded in 1976 CGI is among the largest independent IT and business consulting services firms in the world. With 94000 consultants and professionals across the globe CGI delivers an end-to-end portfolio of capabilities from strategic IT and business consulting to systems integration managed IT and business process services and intellectual property solutions. CGI works with clients through a local relationship model complemented by a global delivery network that helps clients digitally transform their organizations and accelerate results. CGI Fiscal 2024 reported revenue is CA$14.68 billion and CGI shares are listed on the TSX (GIB.A) and the NYSE (GIB). Learn more at .

Job Title: DevSecOps Engineer
Position: Senior software engineer
Experience: 7-9 years
Category: Full Time
Shift: General
Main location: Chennai
Position ID: J1026-0489
Employment Type: Full time
Education Qualification: Engineering Graduate/MCA or equivalent

Position Description:
We are seeking an experienced DevSecOps Engineer with strong expertise in Docker image security containerization vulnerability management and DevSecOps practices. The primary objective of this role is to ensure the security production readiness maintainability and compliance of functional technical and editor Docker images.
The ideal candidate will be responsible for securing container images throughout their lifecycle implementing automated security checks identifying and remediating vulnerabilities and integrating security practices into CI/CD pipelines. The candidate will work closely with development infrastructure platform and security teams to ensure that container images meet organizational security standards and are reliable for production deployment.

Manage the security lifecycle of Docker images including creation scanning validation maintenance and deployment readiness.
Ensure the production readiness maintainability and security compliance of functional technical and editor Docker images.
Perform regular vulnerability scanning and security assessments of Docker images to identify operating system application dependency and package vulnerabilities.
Analyze vulnerability reports assess risks prioritize remediation and coordinate corrective actions with development and platform teams.
Build harden optimize and maintain secure Docker images by following container security best practices.
Implement and maintain security controls within CI/CD pipelines to automate image scanning and compliance checks.
Establish and enforce Docker image standards including the use of trusted base images minimal image layers non-root users and secure configurations.
Manage Docker image repositories and registries including access controls image tagging versioning and lifecycle management.
Ensure compliance with organizational security policies industry standards and applicable regulatory requirements.
Monitor security advisories and CVEs and proactively update or rebuild affected images.
Implement image signing provenance verification and software supply chain security controls where applicable.
Collaborate with development DevOps infrastructure and cybersecurity teams to resolve container security issues.
Automate security checks image validation and remediation workflows using scripting and DevSecOps tools.
Maintain technical documentation security assessment reports remediation records and compliance evidence.
Support production deployments incident investigations root cause analysis and continuous improvement of container security practices.

Must-Have Skills:
Docker and Containerization: Strong experience building managing securing and maintaining Docker images and containers.
Docker Image Security: Hands-on experience with image vulnerability scanning remediation hardening and security compliance.
Vulnerability Management: Knowledge of CVEs CVSS scoring vulnerability prioritization patching and remediation processes.
Container Image Hardening: Experience with secure base images minimal image footprints non-root execution secrets management and least-privilege principles.
CI/CD Pipelines: Experience integrating security scanning and compliance gates into automated build and deployment pipelines.
Container Registries: Familiarity with Docker Hub Harbor Amazon ECR Azure Container Registry or similar image repositories.
Linux Administration: Strong understanding of Linux operating systems package management permissions and system security.
Scripting and Automation: Experience with Shell/Bash Python or similar scripting languages.
Security Best Practices: Understanding of container security access control secure configuration and software supply chain security.
Troubleshooting: Strong analytical skills to investigate security findings resolve image build issues and support production readiness.
Good-to-Have Skills:
Experience with container security tools such as Trivy Snyk Grype Clair Anchore or Prisma Cloud.
Knowledge of Kubernetes security container orchestration and workload protection.
Experience with image signing and verification tools such as Cosign and policy enforcement using admission controls.
Familiarity with Software Bill of Materials (SBOM) SPDX CycloneDX and software supply chain security.
Knowledge of DevSecOps frameworks and security standards such as CIS Docker Benchmarks NIST guidance and OWASP practices.
Experience with infrastructure-as-code tools such as Terraform Ansible or CloudFormation.
Familiarity with Jenkins GitLab CI/CD GitHub Actions Azure DevOps or similar automation platforms.
Experience with private registries artifact management image lifecycle policies and automated image promotion.
Knowledge of cloud security across AWS Microsoft Azure or Google Cloud.
Familiarity with Open Policy Agent (OPA) Kyverno or other policy-as-code solutions.
Experience with vulnerability dashboards compliance reporting audit preparation and security metrics.
Relevant certifications in Kubernetes cloud security Docker or DevSecOps.


CGI is an equal opportunity addition CGI is committed to providing accommodation for people with disabilities in accordance with provincial legislation. Please let us know if you require reasonable accommodation due to a disability during any aspect of the recruitment process and we will work with you to address your needs.

• .NET
• Communication
• Docker
• English
• Java
• Python

Together as owners lets turn meaningful insights into action.

Life at CGI is rooted in ownership teamwork respect and belonging. Here youll reach your full potential because

You are invited to be an owner from day 1 as we work together to bring our Dream to life. Thats why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our companys strategy and direction.

Your work creates value. Youll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas embrace new opportunities and benefit from expansive industry and technology expertise.

Youll shape your career by joining a company built to grow and last. Youll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.

That same commitment to fairness extends to how we use technology. To support our recruitment team AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals.

Come join our teamone of the largest IT and business consulting services firms in the world.