---
title: 'SDE3, Infrastructure Security Engineer (DevSecOps) at Sarvam'
canonical: 'https://feeny.ai/job/sde3-infrastructure-security-engineer-devsecops-sarvam-bengaluru-f76y1pzvww4h'
type: 'job'
last_seen: '2026-10-31'
---

# SDE3, Infrastructure Security Engineer (DevSecOps) at Sarvam

- **Company:** [Sarvam](https://feeny.ai/companies/sarvam)
- **Location:** Bengaluru, India
- **Employment:** full-time
- **Work type:** onsite
- **Posted:** 2026-10-26
- **Last confirmed live:** 2026-10-31
- **Apply:** https://jobs.ashbyhq.com/sarvam/1dd07b8b-0c0b-422a-8ff4-c99bdc5add68

## Job description

## About the team

Sarvam builds Indic-language AI used at population scale. The CPU Infrastructure team runs everything outside the GPU fleet: Kubernetes across Azure, AWS, GCP and Indian sovereign clouds, the network between them, Cloudflare, identity, secrets, observability, cost and the delivery pipeline every product ships through. The team builds and runs what it builds. Engineers own real systems end to end, and every repeated piece of manual work is a candidate for automation. As an AI company, we are building AI agents into our own operations, to plan and review infrastructure changes, triage alerts and handle routine issues, with engineers setting the guardrails.

## About the role

You are an infrastructure engineer whose first instinct is security, and who builds rather than only operates. You have worked on banking, fintech, payments or similarly regulated products, where a misconfiguration is an incident and an audit is routine. Here you set what “secure” means across Sarvam’s infrastructure and build the automation that enforces it, so security is a property of the pipeline rather than a review step. You work closely with the compliance team. This is a hands-on role: most of your time goes into building, and you guide engineering teams across Sarvam on security — setting standards, reviewing security-relevant work and mentoring engineers.

## Responsibilities

- Define and enforce security baselines for Kubernetes, cloud accounts, container images and CI/CD across all clouds
- Write the policy gates in the delivery pipeline (OPA / Conftest, Kyverno or equivalent): network exposure, IAM, image provenance, secrets, data residency
- Own secrets and workload identity: Vault or cloud-native equivalents, rotation, short-lived and scoped credentials, no long-lived keys
- Build detection and response: runtime security (Falco / Tetragon or equivalent), log-based detections, alerting and playbooks
- Run the finding-to-fix loop for security findings: triage, assign, fix, add a detection, retest
- Use LLMs and AI agents in security work: triaging findings, reviewing infrastructure changes, tuning detections, drafting incident timelines — and secure the agents themselves with scoped, short-lived permissions and audit trails
- Harden the supply chain: image signing and scanning, dependency policy, SBOMs
- Automate compliance evidence (CERT-In, ISO 27001, SOC 2, DPDP) together with the compliance team
- Set the security standards other engineers follow and review security-relevant changes
- Take part in on-call and lead security incidents

## Requirements

- 5–9 years in DevOps, platform or security engineering, with at least 2 in a bank, fintech, payments company or other regulated environment
- Strong Kubernetes and Linux fundamentals; has run production clusters on at least one major cloud
- Hands-on with Terraform / OpenTofu and GitOps (ArgoCD or Flux)
- Has built security automation, not only operated tools: policy-as-code, secrets rotation, CI/CD security gates or detection pipelines
- Working knowledge of IAM, network security, TLS and secrets management across clouds
- Scripting and tooling in Python or Go
- Has been through security audits and knows what evidence auditors need
- Has built or used AI-based automation in infrastructure or security work, and understands the risks of AI agents: prompt injection, over-broad permissions, unreviewed actions
- Nice to have: Vault, SPIFFE / SPIRE, Falco or Tetragon, Cloudflare WAF, incident response lead experience, multi-cloud experience

## About Sarvam

## Company Overview
- **One-liner**: Sarvam is building India's full-stack sovereign AI platform, delivering state-of-the-art models and enterprise-grade applications for Indic languages.
- **Entity Type**: Private (Series A – $41M raised)
- **Headquarters**: Bengaluru, India
- **Founded**: August 2023
- **Founders**: Dr. Vivek Raghavan, Dr. Pratyush Kumar

## Core Business
- Primary industry: Artificial Intelligence / Generative AI
- Target customers: Enterprises, Government, Developers (B2B, B2G)
- Mission: Make AI widely accessible to everyone in India by building foundational components that reflect how the country thinks, speaks, reasons, and solves problems.

## Products & Services
- **Sarvam Cloud**: Fully managed, automatically scaling API platform for Indic AI capabilities.
- **Speech to Text (Saaras)**: High‑accuracy ASR across 12 Indic languages.
- **Text to Speech (Bulbul)**: Natural voices across 11 Indic languages.
- **Translation**: State‑of‑the‑art translation across 23 languages.
- **Document Digitisation (Akshar)**: Convert PDFs and images into structured data.
- **Vision Models**: Image understanding and processing.
- **Samvaad**: Conversational AI studio for building voice agents.
- **Arya**: AI‑for‑work platform with forward‑deployed engineers for custom agent design and integration.
- **Deployment Options**: Private cloud, on‑premise, hybrid, or air‑gapped environments.

## Market Standing
- **Valuation/Market Cap**: Not disclosed (private)
- **Key Metric**: Total funding $41M (from Khosla Ventures, Lightspeed, Peak XV Partners)
- **Notable Investors/Partners**: Khosla Ventures, Lightspeed, Peak XV Partners
- **Growth Signals**: 62 open positions across engineering, models, product, sales, and more; case studies with large‑scale deployments (50,000+ farmer feedback calls, millions of policy calls); SOC 2 Type II, ISO 27001, DPDP compliant.

## Competitive Advantages
- **Sovereign AI**: All technology developed and operated entirely in India, with full data control and compliance with Indian data protection laws.
- **Full‑stack platform**: From foundational models to enterprise agents, everything built in‑house.
- **Forward‑deployed engineering**: Dedicated engineers embedded with customer teams to ensure successful delivery.
- **Population‑scale impact**: Proven ability to serve millions of users in Indic languages across government and BFSI.
- **Deployment flexibility**: Can run on any infrastructure, including air‑gapped for regulated industries.

## Strategic Focus
- Continue building state‑of‑the‑art models and tools for Indic languages.
- Expand enterprise and government adoption of conversational AI agents.
- Nurture the Indian AI ecosystem by open‑sourcing models and tools.
- Scale team rapidly (62 open roles) to support growing customer demand.

## Why Work Here
- **Mission‑driven opportunity**: Shape AI that serves India’s linguistic and cultural diversity.
- **On‑site first**: All roles are based in Bengaluru (Delhi also available), fostering deep collaboration.
- **Cutting‑edge work**: Foundational model research, ML infrastructure, full‑stack product engineering.
- **High‑impact culture**: Teams work directly with customers via forward‑deployed engineers, seeing immediate real‑world use.
- **Backed by top investors**: Financial stability and growth runway from Lightspeed, Peak XV, and Khosla Ventures.

## Sources
1. [sarvam.ai](https://www.sarvam.ai/)
2. [sarvam.ai/about-us](https://www.sarvam.ai/about-us)
3. [sarvam.ai/careers](https://www.sarvam.ai/careers)
4. [jobs.ashbyhq.com/sarvam](https://jobs.ashbyhq.com/sarvam)
5. [linkedin.com/company/sarvam-ai](https://www.linkedin.com/company/sarvam-ai)

## Other roles at Sarvam

- [SDE2 - API Platform](https://feeny.ai/job/sde2-api-platform-sarvam-bengaluru-mmq7ahafqqwj) — Bengaluru, India
- [Product & Strategy Associate](https://feeny.ai/job/product-strategy-associate-sarvam-bengaluru-h592ah8z91et) — Bengaluru, India
- [Infrastructure Engineer](https://feeny.ai/job/infrastructure-engineer-sarvam-bengaluru-rfqe8sbcff7f) — Bengaluru, India
- [Marketing internship (brand & communication)](https://feeny.ai/job/marketing-internship-brand-communication-sarvam-bengaluru-fy8nbbwdvcs6) — Bengaluru, India
- [Software Development Engineer - Tejas](https://feeny.ai/job/software-development-engineer-tejas-sarvam-bengaluru-kth87y46fjd3) — Bengaluru, India
- [Software Engineer - Model API Platform](https://feeny.ai/job/software-engineer-model-api-platform-sarvam-bengaluru-6252xtzyzy9f) — Bengaluru, India
- [ML Engineer (Training Infra), Foundational Models](https://feeny.ai/job/ml-engineer-training-infra-foundational-models-sarvam-bengaluru-byw6f3s2ty06) — Bengaluru, India
- [Staff Engineer - Telephony](https://feeny.ai/job/staff-engineer-telephony-sarvam-bengaluru-4mt7q90ph60d) — Bengaluru, India
- [Staff Engineer - Systems Engineering](https://feeny.ai/job/staff-engineer-systems-engineering-sarvam-bengaluru-z6az3vchvm99) — Bengaluru, India
- [Growth Marketing Intern](https://feeny.ai/job/growth-marketing-intern-sarvam-bengaluru-nd6d1ycn199k) — Bengaluru, India