<div><span style="color: rgba(0, 0, 0, 0.6);">🌳 Tuitions Tree – From Roots to Results</span></div><div><span style="color: rgba(0, 0, 0, 0.6);">An educational initiative by TechHost Services Private Limited</span></div><div><br></div><div><span style="color: rgba(0, 0, 0, 0.6);">Founded in 2023 by the visionary team behind TechHost Services, Tuitions Tree was created to revolutionize the way students access quality education—right from the comfort of their homes or online.</span></div><div><br></div><div><span style="color: rgba(0, 0, 0, 0.6);">At Tuitions Tree, we believe in empowering students through personalized learning. Our services include:</span></div><div><span style="color: rgba(0, 0, 0, 0.6);">📘 Home &amp; Online Tuitions</span></div><div><span style="color: rgba(0, 0, 0, 0.6);">🎓 Mentorship Programs</span></div><div><span style="color: rgba(0, 0, 0, 0.6);">🗣️ Seminars &amp; Workshops</span></div><div><span style="color: rgba(0, 0, 0, 0.6);">🚀 Career-Oriented Courses</span></div><div><br></div><div><span style="color: rgba(0, 0, 0, 0.6);">What sets us apart?</span></div><div><span style="color: rgba(0, 0, 0, 0.6);">✅ Demo Classes – Find the right tutor before committing</span></div><div><span style="color: rgba(0, 0, 0, 0.6);">✅ Affordable Fee Structure – Making education accessible</span></div><div><span style="color: rgba(0, 0, 0, 0.6);">✅ Tailored Learning – For every age group and academic level</span></div><div><br></div><div><span style="color: rgba(0, 0, 0, 0.6);">We’re currently serving students in cities like Vizag and Rajahmundry, with plans to expand across India—bringing quality learning solutions to more homes.</span></div><div><br></div><div><span style="color: rgba(0, 0, 0, 0.6);">🔗 In addition to education, you can also explore and benefit from the full range of IT and Staffing solutions offered by TechHost Services, our parent company known for its excellence in innovation, recruitment, and digital growth.</span></div><div><br></div><div><span style="color: rgba(0, 0, 0, 0.6);">Together, Tuitions Tree and TechHost Services are committed to nurturing talent, building futures, and delivering results that matter.</span></div>

Tuitions Tree

<div><strong>Role:&nbsp;</strong>Azure DevSecOps Specialist with a Focus on Fortify and SonarQube</div><div><strong>Location</strong>: Vashi, Mumbai ( Work From Office )</div><div><strong>Experience</strong>: Minimum 10 Years of Experience in the IT industry and 3 to 5 years as an Azure DevOps Engineer</div><div><strong>Notice Period - </strong>0 to 10 Days Maximum</div><div><br></div><div> <strong><u>Key Responsibilities:</u></strong></div><div><u>1.&nbsp;&nbsp;&nbsp;&nbsp;Azure App Service:</u></div><div> <strong>o&nbsp;&nbsp;&nbsp;&nbsp;Web App Deployment:</strong></div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Deploying web applications (ASP.NET, Node.js, Python, etc.).</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Configuring custom domains and SSL certificates.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Scaling app service plans.</div><div> <strong>o&nbsp;&nbsp;&nbsp;&nbsp;Continuous Integration/Continuous Deployment (CI/CD):</strong></div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Setting up CI/CD pipelines using Azure DevOps or GitHub Actions.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Automating app deployments.</div><div> <strong>o&nbsp;&nbsp;&nbsp;&nbsp;Deployment and Scaling:</strong></div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Deploy code updates using deployment slots.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Scale out/in based on demand (manual or auto-scaling).</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Monitor resource utilization and adjust accordingly.</div><div> <strong>o&nbsp;&nbsp;&nbsp;&nbsp;Configuration Management:</strong></div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Manage app settings, connection strings, and environment variables.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Set up custom domains and SSL certificates.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Configure authentication and authorization.</div><div> </div><div> <u>2.&nbsp;Log Analytics:</u></div><div> <strong>o&nbsp;&nbsp;&nbsp;&nbsp;Data Collection and Queries:</strong></div><div><strong> </strong>§&nbsp;&nbsp;&nbsp;&nbsp;Set up data collection from Azure resources.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Write custom queries to analyze logs.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Create alerts based on query results.</div><div> <strong>o&nbsp;&nbsp;&nbsp;&nbsp;Workspace Management:</strong></div><div><strong> </strong>§&nbsp;&nbsp;&nbsp;&nbsp;Manage Log Analytics workspaces.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Adjust retention settings for log data.</div><div> </div><div> <u>3. Logic Apps:</u></div><div><u> </u><strong>o&nbsp;Workflow Design and Deployment:</strong></div><div> §&nbsp;Create logic app workflows using connectors.</div><div> §&nbsp;Configure triggers and actions.</div><div> §&nbsp;Monitor workflow runs and troubleshoot failures.</div><div>&nbsp;</div><div>&nbsp;</div><div>&nbsp;</div><div>&nbsp;</div><div><br></div><div> </div><div> <u>4. Reporting Tasks:</u></div><div> <strong>o&nbsp;Monthly Security Summary Report:</strong></div><div> §&nbsp;Generate a monthly report summarizing security posture.</div><div> §&nbsp;&nbsp;Include details on vulnerabilities, incidents, and compliance.</div><div> §&nbsp;&nbsp;Share with relevant stakeholders (security teams, management).</div><div><br></div><div> o&nbsp;&nbsp;Custom Dashboards:</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Create custom dashboards in Azure Monitor.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Visualize security metrics, threat trends, and compliance status.</div><div> </div><div> 5.&nbsp;&nbsp;&nbsp;&nbsp;Process Automation:</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Runbook Creation and Execution:</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Design and deploy automation runbooks.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Schedule and trigger runbook executions.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Monitor job status and logs.</div><div> </div><div> <strong>6.&nbsp;&nbsp;&nbsp;&nbsp;Automation using Azure Resource Manager (ARM):</strong></div><div><br></div><div><strong> o&nbsp;&nbsp;&nbsp;&nbsp;ARM Template Development and Maintenance:</strong></div><div><strong> </strong>§&nbsp;&nbsp;&nbsp;&nbsp;Create and Update Templates: Develop ARM templates for your infrastructure components (VMs, networks, storage, etc.).</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Version Control: Store templates in a version-controlled repository (e.g., Git).</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Review and Refactor: Regularly review and refactor templates to ensure consistency and best practices.</div><div> <strong>o&nbsp;&nbsp;&nbsp;&nbsp;Azure DevOps Pipeline Configuration:</strong></div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Pipeline Creation: Set up an Azure DevOps pipeline for your project.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Pipeline Variables: Define variables for template parameters (e.g., resource names, locations).</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Environment-Specific Pipelines: Create separate pipelines for different environments (dev, test, prod).</div><div> <strong>o&nbsp;&nbsp;&nbsp;&nbsp;Deployment Testing:</strong></div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Test Deployments: Run test deployments using the pipeline.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Validation Checks: Validate that deployed resources match the expected state.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Rollback Testing: Test rollback scenarios to ensure a successful recovery.</div><div> <strong>Monitoring Tasks:</strong></div><div><strong> </strong>o&nbsp;&nbsp;&nbsp;&nbsp;Pipeline Execution Monitoring:</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Pipeline Runs: Monitor pipeline runs for successful execution.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Logs and Artifacts: Review logs and artifacts generated during deployments.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Pipeline Triggers: Monitor triggers (manual, scheduled, or CI/CD).</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Resource Monitoring:</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Azure Monitor Integration: Set up monitoring for deployed resources.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Metrics and Alerts: Monitor resource health, performance, and usage.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Alert Rules: Configure alerts for critical events (e.g., resource failures).</div><div> Reporting Tasks:</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Deployment Reports:</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Deployment History: Maintain a record of successful and failed deployments.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Deployment Summary: Generate a summary report showing the resources deployed in each environment.</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Compliance Reports:</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Policy Compliance: Validate that deployed resources adhere to organizational policies.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Security Baselines: Check compliance with security baselines (e.g., CIS, NIST).</div><div> </div><div> 7.&nbsp;&nbsp;&nbsp;&nbsp;Azure Devops, Fortify and Sonarqube</div><div> Azure DevOps:</div><div> Operational Tasks:</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Pipeline Configuration:</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Set up CI/CD pipelines for your projects.</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Define build and release stages.</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Configure triggers (manual, scheduled, or based on code changes).</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Artifact Management:</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Publish and manage build artifacts (e.g., binaries, packages).</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Set retention policies for artifacts.</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Environment Provisioning:</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Automate environment provisioning using Infrastructure as Code (IaC) tools (e.g., ARM templates, Terraform).</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Ensure consistency across environments (dev, test, prod).</div><div> Monitoring Tasks:</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Pipeline Execution Monitoring:</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Monitor pipeline runs for successful execution.</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Review logs, artifacts, and test results.</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Set up alerts for pipeline failures.</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Code Quality and Testing:</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Integrate static code analysis tools (e.g., SonarQube) into your pipelines.</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Monitor code quality metrics (e.g., code smells, security vulnerabilities).</div><div> Fortify:</div><div><br></div><div> <strong>Operational Tasks:</strong></div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Static Application Security Testing (SAST):</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Set up Fortify scans for your codebase.</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Define scan policies (e.g., rulesets, severity thresholds).</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Schedule regular scans (e.g., nightly builds).</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Results Management:</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Review Fortify scan results.</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Prioritize and triage findings.</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Assign remediation tasks to developers.</div><div><br></div><div> <strong>Monitoring Tasks:</strong></div><div><strong> </strong>o&nbsp;&nbsp;&nbsp;&nbsp;Scan Execution Monitoring:</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Monitor scan execution times.</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Detect any failures or issues during scans.</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Set up alerts for critical findings.</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Trend Analysis:</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Track code quality improvements over time.</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Monitor reduction in vulnerabilities.</div><div><br></div><div> SonarQube:</div><div><br></div><div> <strong>Operational Tasks:</strong></div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Static Code Analysis:</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Set up SonarQube to analyze your codebase.</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Configure quality profiles and rules.</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Integrate SonarQube into your CI/CD pipelines.</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Quality Gate Configuration:</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Define quality gate conditions (e.g., code coverage, code smells, security issues).</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Set thresholds for pass/fail criteria.</div><div><br></div><div> <strong>Monitoring Tasks:</strong></div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Quality Gate Monitoring:</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Monitor quality gate status for each build.</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Detect regressions or violations.</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Set up notifications for failed quality gates.</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Resource Utilization:</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Monitor SonarQube server memory, CPU, and disk usage.</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Adjust memory settings if needed.</div><div> </div><div> <strong>8.&nbsp;&nbsp;&nbsp;&nbsp;Reporting:</strong></div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Daily Operational Reports:</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Azure Monitor Reports:</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Review daily health, performance, and usage metrics for your Azure resources.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Check for any critical alerts or anomalies.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Investigate and address issues promptly.</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Azure Service Health:</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Check for active issues or planned maintenance affecting your services.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Stay informed about any service disruptions.</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Custom Dashboards:</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Create daily dashboards with real-time data for quick insights.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Monitor key metrics relevant to your business operations.</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Weekly Operational Reports:</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Azure Advisor Recommendations:</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Analyze weekly recommendations for optimizing your Azure environment.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Implement suggested changes to improve efficiency and cost savings.</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Application Insights Reports:</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Review weekly application availability, response times, and error rates.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Identify areas for improvement in your applications.</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Security Center Alerts:</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Check for security alerts related to your resources.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Investigate any suspicious activities.</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Monthly Operational Reports:</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Cost Management Reports:</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Analyze monthly spending patterns.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Identify cost-saving opportunities.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Review budget adherence.</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Resource Usage Reports:</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Evaluate resource utilization over the month.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Adjust resource allocations as needed.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Plan for scaling or optimization.</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Service Health History:</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Look back at any historical service disruptions.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Understand their impact on your operations.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Learn from past incidents.</div><div> </div><div> </div><div> Key Qualifications:</div><div> <strong>1.&nbsp;&nbsp;&nbsp;&nbsp;Certifications:</strong></div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Microsoft Certified: Azure DevOps Engineer Expert.</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Certified Information Systems Security Professional (CISSP) or equivalent.</div><div> o&nbsp;&nbsp;&nbsp;&nbsp;Relevant certifications for Fortify and SonarQube (if available).</div><div> </div><div> 2.&nbsp;&nbsp;&nbsp;&nbsp;Technical Skills:</div><div> <strong>o&nbsp;&nbsp;&nbsp;&nbsp;Azure DevOps:</strong></div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Proficiency in Azure DevOps, including pipelines, repositories, and artifacts.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Experience with Infrastructure as Code (IaC) using tools like Terraform or Azure Resource Manager (ARM) templates.</div><div> <strong>o&nbsp;&nbsp;&nbsp;&nbsp;Fortify:</strong></div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Hands-on experience with Fortify SAST tools and security scanning.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Knowledge of vulnerability management and remediation techniques.</div><div> <strong>o&nbsp;&nbsp;&nbsp;&nbsp;SonarQube:</strong></div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Experience integrating and managing SonarQube for code analysis.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Understanding of code quality metrics and security</div><div> </div><div> <u>3. Security and Development Expertise:</u></div><div> <strong>o&nbsp;&nbsp;&nbsp;&nbsp;Secure Coding Practices:</strong></div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Strong understanding of secure coding principles and practices.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Knowledge of common security vulnerabilities (e.g., OWASP Top Ten).</div><div> <strong>o&nbsp;&nbsp;&nbsp;&nbsp;DevSecOps Practices:</strong></div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Experience implementing DevSecOps practices in a CI/CD environment.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Familiarity with security tools and technologies used in DevSecOps.</div><div> </div><div> <u>4. Communication and Collaboration:</u></div><div> <strong>o&nbsp;&nbsp;&nbsp;&nbsp;Team Collaboration:</strong></div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Strong collaboration skills to work effectively with cross-functional teams.</div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Ability to communicate security requirements and issues clearly to developers and stakeholders.</div><div> <strong>o&nbsp;&nbsp;&nbsp;&nbsp;Documentation Skills:</strong></div><div> §&nbsp;&nbsp;&nbsp;&nbsp;Excellent documentation skills for creating detailed security reports, policies, and procedures.</div><div> </div><div> </div>