Role: Azure DevOps Engineer
Location: London (Hybrid)
Employment: Fulltime
Role overview
This is an excellent opportunity for Azure DevSecopS professionals to be part of leading-edge technology projects. Cognizant’s Cloud, Infrastructure & Security Services Practice provides end-to-end solutions covering architecture, design, implementation, management, and on-going support across the entire enterprise technology infrastructure. Our services include a spectrum of management, consulting, and systems integration services to help our clients maximize value in their infrastructure resources, while optimizing infrastructure performance and cost.
Roles and Responsibilities
- Design, build and maintain secure CI/CD pipelines in Azure DevOps to deploy Azure resources, applying DevOps and GitOps principles.
- Secure Azure DevOps repositories and pipelines, and define and enforce quality gates and deployment best practices.
- Integrate SAST, SCA, DAST and container security scanning into CI/CD pipelines to embed security across the SDLC.
- Identify, classify and evaluate vulnerabilities against the environment, and drive their mitigation in line with security best practices.
- Proactively identify security gaps across infrastructure, network and applications, and strengthen the overall security posture.
- Design and propose security solutions aligned with Zero Trust principles, covering CASB, cloud computing, SIEM, SOAR, IAM, PAM, Azure Active Directory and SSO.
- Implement and manage cloud-native security and monitoring tools, including Log Analytics, Azure Monitor, Azure Security Center, Azure Defender and Azure Sentinel, to detect and alert on security threats.
- Implement Azure Policy and Azure Monitor for security governance and compliance, ensuring alignment with regulatory requirements, risk and control frameworks.
Required Skills
- Hands-on experience with Azure Sentinel (SIEM) is mandatory.
- Hands-on experience as an engineer or architect with on-premises and/or public cloud technologies, specifically Microsoft Azure.
- Strong knowledge of Azure security best practices and services, including Azure Container Registry, Azure Defender, Azure Policy, and Azure Monitoring and alerts.
- Solid understanding of DevOps and GitOps concepts, with experience in Azure DevOps Repos and Pipelines and their security.
- Strong understanding of SAST, SCA and DAST, with hands-on experience integrating security scanning tools into CI/CD pipelines.
- Extensive experience implementing security across the SDLC, including container security.
- Sound knowledge of vulnerability management – identification, classification, risk evaluation and remediation.
- Broad security background across infrastructure, network and application security.
- Good understanding of regulatory requirements, risk management and security controls.
- Ability to design and propose security solutions and architectures.
Good to Have
Familiarity with security and compliance scanning tools such as Checkov (infrastructure), GitHub Advanced Security (code), SonarQube and Burp Suite, or similar tools
关于高知特 (Cognizant)
高知特(Cognizant)（纳斯达克代码：CTSH）作为一家AI Builder和相关技术服务提供商，致力于通过打造全栈AI解决方案，帮助企业将人工智能投资转化为实际价值。公司凭借深厚的行业经验、流程优化和工程技术专长，将企业独特的业务场景融入科技系统，赋能组织释放人才潜能，推动切实成果，并帮助全球企业在瞬息万变的环境中保持领先。如需了解更多详情，敬请访问 cognizant.ai 或关注@cognizant。
补充雇佣信息
薪酬信息截至本职位发布之日为准。Cognizant 保留在适用法律允许的范围内随时修改该信息的权利。
申请人可能需要通过现场面试或视频会议的方式参加面试。此外，候选人在每次面试时可能需要出示其当前所在州或政府签发的有效身份证件。
Cognizant 是一家提供平等就业机会的雇主。在招聘过程中，您的申请和候选资格不会因种族、肤色、性别、宗教、信仰、性取向、性别认同、国籍、残疾、遗传信息、怀孕、退伍军人身份或任何其他受联邦、州或地方法律保护的特征而受到影响。
