DevSecOps Engineer

About HCLTech HCLTech is a global technology company, spread across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. We re powered by our people a global, diverse, multi-generational talent - representing 161 nationalities whose unique spark, perspective and boundless passion drive our culture of proactive value creation and problem-solving.To learn more about how we can supercharge progress for you, visitYour role and responsibilitiesDevelop and maintainUnified Device Identity Services, including APIs and plugins. Provide tactical and operational support foredge security infrastructure(e.g., Web Application Firewalls, Rate Limiting Services). Build and manageHardware Attestation Services, supporting workload attestation and policy enforcement. Implement identity issuance and attestation for workloads and agents using open-source tools likeSPIFFE, SPIRE, and Keylime. Enable secure application-level token verification throughJWT signing. Support IAM initiatives, includingAuth IDP creationandPingFed decommissioning. Integrate deployments into managedCI/CD pipelinesand repositories. Design and maintainscale, sanity, functional, and regression tests. Develop observability dashboards, alerts, and incident response workflows. Ensure compliance withpatching guidelinesfor CVE and vulnerability management.Skills and qualification:Languages & Tools:Golang, Python, PKI, ArgoCD, Helm, Kubernetes, Istio, Envoy Security & Identity:Zero Trust, SPIFFE, SPIRE, OIDC Flows Additional Expertise:Istio Rate Limit Service, AI-related topics (MCP, RAG) Strong knowledge ofcloud-based services running in service meshesis expected. Proven experience incloud and on-prem security infrastructure. Hands-on expertise withservice mesh architectures. Strong understanding ofIAM, PKI, and attestation frameworks. Ability to work in fast-paced environments and collaborate withSecOps teams. Advanded EnglishPlease, submit resumé in English.Why choose us?We are one of the largest and fastest growing technology companies in the world, with offices in over 60 countries and 224,000 employees Our company is extremely diverse with 165 nationalities represented We offer the opportunity to work with colleagues from all over the world We offer a virtual-first work environment, promoting a good integration between your work and personal life, with real flexibility We are committed to your growth, offering learning and career development opportunities at all levels to help you find your unique brilliance. We offer comprehensive benefits to all employees We are certified as a "Great Place to Work" and "Top Employer" in 17 countries, and recognized as a “Top Employer” in Brazil specifically, offering a positive work environment that values employee recognition and respectEquality & Opportunity for AllRepresenting 165 nationalities worldwide, we are proud to be an equal opportunity employer committed to providing equal employment opportunities to all applicants and employees without regard to race, religion, sex, color, age, national origin, pregnancy, sexual orientation, disability or genetic information, or any other protected classification, in accordance with federal, state and/or local laws