Deutsche Bank's Mumbai branch is building its institutional-grade Digital Asset Custody (DAC) platform and seeks a DevSecOps Senior Engineer. You will provide hands-on technical security execution and assurance for digital assets, focusing on robust security, regulatory compliance, and operational resilience. Your role is central to security automation, secure architecture, and bridging development, operations, and information security initiatives.
What You'll Do
- Implement and maintain secure physical and logical infrastructure for digital asset custody, including datacenter setup, configuration of Linux jump hosts, HSMs, and specialized network devices.
- Contribute to designing, implementing, and maintaining security tools within CI/CD pipelines, enforcing secure coding practices, and performing threat modeling for digital asset custody systems.
- Support the secure integration, deployment, and hardening of Key Management Systems (KMS) and design resilient interaction mechanisms with various blockchain networks, understanding regulatory requirements.
- Implement robust security controls for hybrid cloud/on-premises custody deployments, focusing on IAM, network segmentation, and ensuring security-first principles in Infrastructure as Code templates.
- Participate in the identification, remediation, and monitoring of security vulnerabilities, and contribute to incident response playbooks and security tooling for digital asset custody.
- Support and document Key Ceremonies for cryptographic assets, ensuring strict adherence to protocols, multi-person control, and robust audit trails.
- Contribute to the architecture and implementation of highly secure, geographically dispersed, and tested backup/recovery strategies for cryptographic keys.
What We're Looking For
- Experience in DevSecOps, DevOps, or Software Engineering with a strong security focus, plus Information Security.
- Hands-on experience with KMS, HSMs, MPC systems, cryptographic practices, and a solid understanding of Blockchain technologies.
- Practical experience with physical datacenter operations (rack-and-stack, cabling), CI/CD tools, methodologies, and automating security into pipelines.
- Strong understanding of network security principles (firewalls, IDS/IPS, micro-segmentation), information security frameworks (ISO 27001, NIST CSF), and basic financial regulations (MiCA, DORA) understanding.
Nice to Have
- Experience emphasizing Digital Asset Custody or high-value cryptographic systems, ideally within a financial/regulated environment.
Technical Stack
- Linux, HSMs, Key Management Systems (KMS), MPC systems
- Blockchain technologies, CI/CD tools, Infrastructure as Code (IaC)
Team & Environment
You will be part of the team building the Digital Asset Custody (DAC) platform.
Benefits & Compensation
- Consultation in difficult life situations and mental health awareness trainings.
- Health check-ups, vaccination drives, and advice on healthy living and nutrition.
- PME family service, FitnessCenter Job, flexible working (e.g., part-time, hybrid working, job tandem).
- Extensive culture of diversity, equity, and inclusion.
- Pension plans, banking services, company bicycle or 'Deutschlandticket'.
Work Mode
This role is based in Mumbai and follows a hybrid work model.
Deutsche India Private Limited fosters an extensive culture of diversity, equity, and inclusion.
