Senior Devops Engineer at Par Technology in Gurugram

Job description

For over four decades, PAR Technology Corporation (NYSE: PAR) has been a leader in restaurant technology, empowering brands worldwide to create lasting connections with their guests. Our innovative solutions and commitment to excellence provide comprehensive software and hardware that enable seamless experiences and drive growth for over 100,000 restaurants in more than 110 countries. Embracing our "Better Together" ethos, we offer Unified Customer Experience solutions, combining point-of-sale, digital ordering, loyalty and back-office software solutions as well as industry-leading hardware and drive-thru offerings. To learn more, visit partech.com or connect with us on LinkedIn, X (formerly Twitter), Facebook, and Instagram. We are looking for a Senior DevOps Engineer to embed security into every stage of how PAR builds, ships, and operates software. You will sit at the intersection of platform engineering and security, owning the tooling, automation, and guardrails that let dozens of product teams move fast without compromising the trust of the brands and guests who rely on us. This is a hands-on senior role: you will design secure CI/CD and cloud infrastructure, hunt down risk before it reaches production, and raise the security bar for the entire engineering organization. What You'll Do • Design, build, and operate secure CI/CD pipelines with integrated SAST, DAST, SCA, secrets scanning, and container image scanning — making the secure path the easy path for product teams. • Harden and automate cloud infrastructure (AWS and/or Azure) using infrastructure-as-code, with security policies enforced as code through tools such as OPA, Sentinel, or native policy engines. • Own container and orchestration security across Docker and Kubernetes: image provenance, runtime protection, network policies, and admission controls. • Implement and tune cloud security posture management, vulnerability management, and threat detection; drive findings to remediation with engineering teams. • Build and maintain secrets management, identity, and least-privilege access patterns (IAM, workload identity, service mesh mTLS). • Lead threat modeling and secure design reviews for new services and architectures; partner with product engineering early rather than auditing late. • Respond to and run post-incident analysis for security events; improve detection, alerting, and runbooks after every incident. • Design and manage cloud networking: VPC/VNet architecture, subnetting, routing, NAT, VPC peering and transit gateways, private endpoints/PrivateLink, and hybrid connectivity (site-to-site VPN, Direct Connect/ExpressRoute). • Operate edge and traffic-layer security: load balancers (ALB/NLB, NGINX, HAProxy), API gateways, WAF, DDoS protection, CDN configuration, DNS management, and TLS certificate lifecycle/PKI automation. • Implement GitOps-based delivery (ArgoCD or Flux) with Helm/Kustomize, and progressive delivery patterns such as blue-green and canary releases with automated rollback. • Build and run the observability stack — metrics, logging, tracing, and alerting (Prometheus, Grafana, ELK/OpenSearch, Datadog, or equivalents) — with SLOs and actionable, low-noise alerts. • Manage artifact repositories and software supply chain: image registries, SBOM generation, artifact signing and provenance (Sigstore/Cosign, SLSA). • Drive capacity, autoscaling, and cost optimization across compute, storage, and network layers without compromising the security posture. • Champion compliance-relevant engineering controls (e.g., PCI DSS, SOC 2) and automate evidence collection wherever possible. • Mentor engineers across teams on secure coding and operational security practices; act as a force multiplier, not a gatekeeper. Unleash your Potential • 6–10 years of experience across DevOps, platform, or security engineering, with at least 3 years focused on DevSecOps or application/cloud security in production environments. • Deep hands-on experience with CI/CD platfo