Sutherland: DevSecOps Engineer — Hyderabad, //TS, India

About Sutherland

Sutherland works in business and digital transformation, combining technology services with business-process expertise. Its employer descriptions identify artificial intelligence, automation, cloud engineering and advanced analytics as areas of activity. The company uses products, platforms and service delivery to improve business operations and customer experiences. Its stated approach brings human expertise together with AI, adapting technology and process changes to the needs of the organisation receiving the service rather than providing only a standalone software product.

The position and its setting

Sutherland lists DevSecOps Engineer in Hyderabad, //TS, India, under reference REF44166N. The details below separate the work described by the employer from essential conditions, preferred experience and practical preparation advice.

• Employment type: Full-time
• Employer listing date: 4 September 2026
• Brands: Sutherland

Responsibilities and work described

• Cloud Security — Primary
• Own cloud security posture management (CSPM) across GCP and AWS — continuous assessment, misconfiguration detection, and remediation tracking
• Design: and enforce IAM policies, service account hygiene, least-privilege access controls, and workload identity across multi-cloud environments
• Implementation: VPC security controls — private service access, firewall rules, network policies, ingress/egress restrictions, and Private Google Access
• Internalise and secure service endpoints — move external-facing services to internal load balancers, private endpoints, and VPN/interconnect
• Continuously audit and reduce the public attack surface
• Management: secrets hygiene — enforce Secret Manager (GCP) and AWS Secrets Manager, eliminate hardcoded credentials, and rotate secrets programmatically
• Leadership: cloud security incident response — triage, contain, investigate, and remediate across cloud and Kubernetes environments
• Own compliance reporting for SOC 2, HIPAA, and ISO 27001 — evidence collection, gap analysis, and control implementation
• Research / execution: regular threat modelling, security reviews, and architecture risk assessments
• Kubernetes Security — Primary
• Harden GKE clusters — CIS benchmarks, pod security standards (restricted/baseline), and admission control policies
• Implementation: and manage network policies to enforce east-west traffic segmentation between namespaces and services
• Deployment and support: and operate runtime security tooling (e.g. Falco) for threat detection inside cluster workloads
• Management: Kubernetes RBAC with least-privilege principles
• Audit and remediate overpermissioned service accounts

Essential requirements and candidate background

• 7+ years in DevSecOps, cloud security, or infrastructure security engineering
• Deep hands-on experience securing Kubernetes clusters in production — RBAC, network policies, pod security, and runtime protection
• Experience: GCP and/or AWS security services and IAM design
• CI/CD security knowledge — pipeline hardening, secrets management, and integrated scanning
• Experience internalising service endpoints and reducing cloud attack surface
• Familiarity: HIPAA, SOC 2, or ISO 27001 compliance in regulated environments
• Clear communication skills — able to explain a critical vulnerability to a CTO and write a runbook for an engineer

Preferred experience and additional strengths

• Falco, OPA/Gatekeeper, HashiCorp Vault, Wiz/Orca/Prisma Cloud, Trivy/Snyk, SIEM (Splunk/Chronicle), Python or Go
• Certified Kubernetes Security Specialist (CKS)
• Google Professional Cloud Security Engineer or AWS Security Specialty certification
• EBPF-based security tooling (Cilium, Tetragon), penetration testing, or red team experience
• Threat modelling using STRIDE or PASTA
• Service mesh security beyond Istio

Location, schedule and contract conditions

• Work arrangement: Remote
• Advertised location: Hyderabad, //TS, India

Pay and application dates

A verified salary figure is not established in this article. An online estimate for another DevSecOps Engineer vacancy is not an offer for reference REF44166N; use the employer’s own pay disclosure and recruitment communication.

A closing date is not confirmed in this article. Check the current employer page before submitting: an undated posting can change or be withdrawn.

How to apply to Sutherland

Applications follow the official employer page linked below.

Open the official Sutherland posting below and match the title and reference REF44166N.

Compare your qualifications and experience with the essential conditions for the Hyderabad, //TS, India position, then read the preferred criteria separately.

Prepare an accurate CV and the supporting items requested in that employer’s application. Provide only information and documents you are authorised to share.

Use the employer’s application option, complete the required fields and review the submission. Retain the acknowledgement when one is provided. Job Alerts World does not receive the application.

Practical preparation: Python

Python work is easier to assess through a concrete example than a list of libraries. Explain the problem, the input data, the parts you implemented and how you checked the output. Include a repository or a short technical note when you can share it.

Relevant skills

• Python
• Kubernetes
• CI/CD
• AWS
• GCP
• ISO
• Google Cloud
• Terraform
• audit
• compliance
• communication