Power Platform Administrator/DevSecOps Engineer
- Industry Other
- Category Information Technology
- Location Kathmandu, Nepal
- Expiry date Apr 18, 2025 (1 day left)
Job Description
Kathmandu, NepalNegotiable
The Power Platform Administrator/DevSecOps Engineer at ITsutra will play a crucial role in embedding security practices into the Power Platform (Power Apps, Power Automate, Power BI, Dataverse) and Azure environments. The role combines security engineering, automation, DevOps, and governance to ensure security is part of every stage of development and deployment. The engineer will automate security policies, manage secure CI/CD pipelines, ensure compliance with security frameworks, and monitor security operations.
Job Description
- Security in Power Platform & Azure
- Implement security best practices for Power Platform and Azure environments.
- Manage and enforce RBAC, Least Privilege Access, and DLP policies.
- Oversee IAM using Azure Active Directory (AAD) and ensure compliance with security standards.
- Secure Power Automate workflows and Power Apps connectors.
- Secure CI/CD & Automation
- Develop secure CI/CD pipelines using Azure DevOps to automate security checks.
- Implement SAST and DAST in the development lifecycle.
- Utilize PowerShell, Power Platform APIs, and Azure CLI for automation.
- Ensure secure deployment with IaC tools like Terraform and ARM templates.
- Security Monitoring & Threat Detection
- Monitor security threats using Microsoft Defender, Azure Security Center, and Sentinel.
- Implement SIEM integration for real-time monitoring.
- Perform vulnerability scanning and penetration testing to detect security gaps.
- Compliance & Governance
- Automate compliance reporting using Microsoft Purview and Azure Policy.
- Define and enforce encryption, backup, and disaster recovery strategies for Azure and Power Platform.
- Infrastructure Security & Zero Trust
- Implement Zero Trust Architecture across Power Platform and Azure.
- Enforce network security best practices using Azure Firewall, NSGs, Private Links, and VPN Gateways.
- Secure cloud-based Power Platform connectors and APIs.
- Collaboration & Incident Response
- Collaborate with developers and IT teams to implement secure coding and deployment practices.
- Participate in incident response for security breaches.
- Conduct security awareness training for teams.
- Provide troubleshooting for security-related issues.
