Role:
We are looking for a Senior Staff DevSecOps Engineer to join our Engineering team. This is a hybrid role based in Bangalore, reporting to the Director, Software Engineering. In this role you will lead Zscaler's Agentic AI-driven DevSecOps capabilities - building secure, enterprise-grade developer agents and automation that integrate with engineering systems. You will design and operate Model Context Protocol (MCP) servers/tools (and related agent tool frameworks) to connect AI agents to CI/CD, source control, observability, security, and operations with strong governance, auditability, and least-privilege access.
What you'll do (Role Expectations)
- Design and maintain secure MCP-integrated infrastructure to power autonomous DevSecOps agents across CI/CD, security, and observability systems
- Standardize AI guardrails and injection mitigations while engineering privacy-first platforms with robust access controls and audit logging
- Manage self-hosted GitLab operations, ensuring high availability and performance while designing reusable CI/CD frameworks
- Scale and harden Kubernetes runner infrastructure using Terraform and GitOps (Argo CD/Flux) to ensure secure, automated deployments
- Shape the technical vision and roadmap while driving cross-functional operational efficiency through design reviews and strategic mentorship
What We're Looking for (Minimum Qualifications)
- 8+ years of expertise in DevOps or Platform Engineering with a track record of cross-org impact, specifically building Agentic AI systems with hands-on experience in MCP servers
- Proven experience with AI guardrails and Responsible AI practices, including safety controls, evaluation/monitoring, and governance-aware implementation
- Expertise in architecting high-performance CI/CD systems and managing self-hosted GitLab, including high availability, upgrades, and troubleshooting
- Proficient in Kubernetes orchestration and Helm, with hands-on expertise in Terraform and GitOps (Argo CD/Flux) for automated infrastructure management
- Strong Linux and cloud (AWS) fundamentals with proficiency in Python/Bash scripting and managing secure, scalable IAM/RBAC and networking infrastructure
What Will Make You Stand Out (Preferred Qualifications)
- Experience operating large GitLab Runner fleets with Kubernetes autoscaling and cost optimization
- Deep supply chain security expertise including signing/attestations, SBOM, SLSA-aligned practices, and policy-as-code
- Expertise in GitLab Geo for multi-site resilience, Vault/KMS for secret governance, and AWS SA-Pro or CKA/CKS certifications
