ARHS Group is looking for a DevSecOps Engineer who can bridge data engineering, security, and automated operations. In this role, you will play a key part in ensuring that the Microsoft Fabric environment is scalable, secure by design, and fully integrated into modern CI/CD and infrastructure‑as‑code practices. You will work closely with data architects, security, and platform teams to embed security and automation across the full data lifecycle. Pipeline & Deployment Automation Design, build, and maintain end‑to‑end CI/CD pipelines using Azure DevOps or GitHub Actions Automate deployments of Fabric workspaces, notebooks, semantic models, and related assets Security & Network Architecture Configure and maintain private network connectivity (Private Endpoints, VNET injection) so that Fabric traffic never crosses the public internet Implement secure ingress and egress patterns using API Gateways and Reverse Proxies Enforce traffic filtering, SSL termination, load balancing, and WAF policies Security by Design Integrate automated security scanning (SAST/SCA) and secret management into data workflows Prevent credential leakage and identify vulnerabilities early in the delivery pipeline Infrastructure as Code Provision and manage Fabric capacities and network security using Bicep, Terraform, or ARM templates Apply “policy as code” principles to ensure consistent compliance Monitoring & Governance Set up real‑time monitoring and alerting using Azure Monitor and Log Analytics Track platform health, cost consumption, and security incidents Implement and audit fine‑grained access controls using Microsoft Entra ID and Fabric RBAC Requirements 3. SPECIFIC EXPERTISE Proeven Experience in the following technologies Microsoft Fabric Ecosystem : Deep technical knowledge of OneLake, Lakehouses, Warehouses, and the integration of Data Factory within the Fabric environment. Policy as Code : Experience implementing Azure Policy to enforce compliance standards across cloud resources. Identity & Access: Implementation of authentication mechanisms, including managed identities, service principals, and conditional access policies via Microsoft Entra ID. Data Security : Expertise in configuring Row-Level Security (RLS), Object-Level Security (OLS), and Microsoft Purview for data discovery and classification. API Integration : Experience using the Microsoft Fabric REST APIs to automate workspace settings and administrative tasks. Networking: Expertise in securing data ingress/egress using Azure Private Link, Virtual Network (VNET) peering etc. Reverse proxies : Experience configuring a pplication gateways, reverse proxies to handle SSL termination and Web Application Firewall (WAF) policies. CERTIFICATIONS DevOps : AZ-400 : Microsoft Certified: DevOps Engineer Expert - required