Role: Azure DevOps Engineer
Location: London (Hybrid)
Employment: Fulltime
Role overview
This is an excellent opportunity for Azure DevSecopS professionals to be part of leading-edge technology projects. Cognizant’s Cloud, Infrastructure & Security Services Practice provides end-to-end solutions covering architecture, design, implementation, management, and on-going support across the entire enterprise technology infrastructure. Our services include a spectrum of management, consulting, and systems integration services to help our clients maximize value in their infrastructure resources, while optimizing infrastructure performance and cost.
Roles and Responsibilities
- Design, build and maintain secure CI/CD pipelines in Azure DevOps to deploy Azure resources, applying DevOps and GitOps principles.
- Secure Azure DevOps repositories and pipelines, and define and enforce quality gates and deployment best practices.
- Integrate SAST, SCA, DAST and container security scanning into CI/CD pipelines to embed security across the SDLC.
- Identify, classify and evaluate vulnerabilities against the environment, and drive their mitigation in line with security best practices.
- Proactively identify security gaps across infrastructure, network and applications, and strengthen the overall security posture.
- Design and propose security solutions aligned with Zero Trust principles, covering CASB, cloud computing, SIEM, SOAR, IAM, PAM, Azure Active Directory and SSO.
- Implement and manage cloud-native security and monitoring tools, including Log Analytics, Azure Monitor, Azure Security Center, Azure Defender and Azure Sentinel, to detect and alert on security threats.
- Implement Azure Policy and Azure Monitor for security governance and compliance, ensuring alignment with regulatory requirements, risk and control frameworks.
Required Skills
- Hands-on experience with Azure Sentinel (SIEM) is mandatory.
- Hands-on experience as an engineer or architect with on-premises and/or public cloud technologies, specifically Microsoft Azure.
- Strong knowledge of Azure security best practices and services, including Azure Container Registry, Azure Defender, Azure Policy, and Azure Monitoring and alerts.
- Solid understanding of DevOps and GitOps concepts, with experience in Azure DevOps Repos and Pipelines and their security.
- Strong understanding of SAST, SCA and DAST, with hands-on experience integrating security scanning tools into CI/CD pipelines.
- Extensive experience implementing security across the SDLC, including container security.
- Sound knowledge of vulnerability management – identification, classification, risk evaluation and remediation.
- Broad security background across infrastructure, network and application security.
- Good understanding of regulatory requirements, risk management and security controls.
- Ability to design and propose security solutions and architectures.
Good to Have
Familiarity with security and compliance scanning tools such as Checkov (infrastructure), GitHub Advanced Security (code), SonarQube and Burp Suite, or similar tools
À propos de Cognizant
Cognizant (NASDAQ : CTSH) est un AI Builder et une entreprise de services numériques (ESN) élaborant des solutions complètes d’IA maximisant les investissements pour des résultats concrets. Sa profonde expertise des métiers, des processus et des technologies lui permet d’intégrer dans les systèmes technologiques le contexte unique de chaque organisation de l’ingénierie à la production à l’échelle. Son objectif : améliorer l’efficacité des équipes, créer de la valeur et permettre aux grandes entreprises de rester performantes dans un monde qui évolue rapidement. Pour en savoir plus : cognizant.ai ou @cognizant.
Renseignments suppplémentaires sur l'emploi
Les informations relatives à la rémunération du poste à pourvoir dépendent de la date de publication de l’offre de poste. Cognizant se réserve le droit de modifier ces informations à tout moment, sous réserve des lois applicables.
Cognizant est un employeur soucieux de l'égalité des chances entre candidats. Votre candidature sera étudiée indépendamment de votre race, couleur, sexe, religion, croyances, orientation sexuelle, identité de genre, origine, handicap, informations génétiques, grossesse, statut d'ancien militaire ou de toute autre critère jugé discriminant par les lois européennes ou françaises.
Vous êtes porteur d'un handicap, vous pouvez-nous contacter par courriel [email protected] si vous souhaitez préciser les aménagements nécessaires pour le poste ou les entretiens à venir.
Les candidats peuvent être invités à participer à des entretiens en face à face ou par vidéoconférence. En outre, les candidats peuvent être amenés à présenter une carte d'identité valide lors de chaque entretien.
