Senior AEM DevSecOps Engineer

This is a fully remote position, open to applicants in India.

📋 Description

• A hands-on Senior Engineer tasked with overseeing platform security, compliance, audit remediation, and secure DevOps practices for the Adobe Experience Manager (AEM) Cloud Service platform.

• Collaborates closely with internal security, compliance, and engineering teams to uphold a secure, reliable, and compliant platform, while guiding project teams on security best practices.

• Addresses platform-level security vulnerabilities identified through security assessments, vulnerability scanning tools (Snyk, SAST/DAST), and CVE reports.

• Triage, prioritize, and resolve security issues within established SLAs.

• Implement security enhancements across AEM Dispatcher, Cloudflare CDN, Adobe Cloud Manager, and application configurations.

• Develop long-term strategies for recurring security challenges, including CSP, secrets management, and code security.

• Conduct project-level security assessments and advocate for secure-by-design development methodologies.

• Resolve security and compliance audit findings promptly and ensure timely remediation.

• Oversee identity and access management (IAM), including user provisioning, deprovisioning, and access reviews across AEM environments.

• Maintain centralized audit logs, retention policies, and conduct periodic audit reviews.

• Assist with internal and external audits by gathering evidence and ensuring adherence to security standards.

• Establish processes and tools to facilitate recurring platform audits.

• Implement and sustain security controls within CI/CD pipelines, encompassing SAST, DAST, and dependency scanning.

• Manage Adobe Cloud Manager pipelines, environment access, and secure deployment methodologies.

• Execute secure secrets and credential management, including rotation and least-privilege access practices.

• Support source code management, CI/CD pipeline governance, and repository migration using GitHub.

• Monitor security vulnerabilities, audit logs, and compliance status.

• Assist in security incident response, investigation, and root cause analysis.

• Collaborate with internal security, compliance, engineering, and infrastructure teams to ensure platform security.

• Partner with external technology vendors to implement security best practices and enhance the platform.

⛳️ Requirements

• 5+ years of experience in DevSecOps, Security Engineering, or security-centric DevOps.

• 2+ years of practical experience with Adobe Experience Manager (AEM) Cloud Service.

• Strong familiarity with CI/CD tools such as GitHub Actions, Jenkins, or equivalent.

• Hands-on experience with Snyk, SAST/DAST tools, dependency scanning, and Content Security Policy (CSP).

• Experience in configuring and managing Cloudflare CDN, WAF, and edge security solutions.

• Understanding of Identity and Access Management (IAM), including user provisioning, deprovisioning, and access certification.

• Experience in supporting security audits and compliance initiatives.

• Proficiency in scripting languages such as Python, Bash, Java, or JavaScript.

• Excellent communication and collaboration skills, with the capability to work efficiently across cross-functional teams.

🏝️ Benefits

• Top-of-the-line Apple laptops for enhanced mobility and productivity.

• Medical insurance coverage for all permanent employees.

• Opportunities to work with an organization that values investing in employee growth.

• A casual work environment that encourages enjoyment while being productive.

• Numerous fun activities: we take over a nearby restaurant every last Friday of the month, provide tickets to all Marvel movies for the entire team, host company picnics, and more!