Role:

We are looking for a Senior Staff DevSecOps Engineer to join our Engineering team. This is a hybrid role based in Bangalore, reporting to the Director, Software Engineering. In this role you will lead Zscaler's Agentic AI-driven DevSecOps capabilities - building secure, enterprise-grade developer agents and automation that integrate with engineering systems. You will design and operate Model Context Protocol (MCP) servers/tools (and related agent tool frameworks) to connect AI agents to CI/CD, source control, observability, security, and operations with strong governance, auditability, and least-privilege access.

What you'll do (Role Expectations)

Design and maintain secure MCP-integrated infrastructure to power autonomous DevSecOps agents across CI/CD, security, and observability systems
Standardize AI guardrails and injection mitigations while engineering privacy-first platforms with robust access controls and audit logging
Manage self-hosted GitLab operations, ensuring high availability and performance while designing reusable CI/CD frameworks
Scale and harden Kubernetes runner infrastructure using Terraform and GitOps (Argo CD/Flux) to ensure secure, automated deployments
Shape the technical vision and roadmap while driving cross-functional operational efficiency through design reviews and strategic mentorship

What We're Looking for (Minimum Qualifications)

8+ years of expertise in DevOps or Platform Engineering with a track record of cross-org impact, specifically building Agentic AI systems with hands-on experience in MCP servers
Proven experience with AI guardrails and Responsible AI practices, including safety controls, evaluation/monitoring, and governance-aware implementation
Expertise in architecting high-performance CI/CD systems and managing self-hosted GitLab, including high availability, upgrades, and troubleshooting
Proficient in Kubernetes orchestration and Helm, with hands-on expertise in Terraform and GitOps (Argo CD/Flux) for automated infrastructure management
Strong Linux and cloud (AWS) fundamentals with proficiency in Python/Bash scripting and managing secure, scalable IAM/RBAC and networking infrastructure

What Will Make You Stand Out (Preferred Qualifications)

Experience operating large GitLab Runner fleets with Kubernetes autoscaling and cost optimization
Deep supply chain security expertise including signing/attestations, SBOM, SLSA-aligned practices, and policy-as-code
Expertise in GitLab Geo for multi-site resilience, Vault/KMS for secret governance, and AWS SA-Pro or CKA/CKS certifications