Powering Enterprise DevSecOps

DevSecOps is the essential evolution of modern software delivery. This book is your definitive roadmap for mastering the shift, moving beyond theory to implement an automated continuous paradigm that drives measurable business value through VSM, SLAs, and KPIs for any large-scale organization.

The book systematically guides you through the entire DevSecOps journey: You will start by defining the continuous practices, then immediately tackle enterprise scale challenges, applying threat modelling and implementing Zero Trust architecture to ensure comprehensive security. Learn to integrate quality across all nine SDLC phases, establish high-performing hybrid team structures, and leverage open source and the cloud era for speed. The book then accelerates into modern architecture with platform approach, micro-frontends, AI-ML in DevSecOps, and the full integration of SRE (SLOs, toil, observability, AI in SRE). Finally, explore specialized models like AIOps and FinOps, discover emerging trends like Policy as Code, and validate these strategies through real-world enterprise transformation journeys.

By the end of this book, you will not only possess the deep technical knowledge to architect a scalable DevSecOps ecosystem but also the strategic insight to lead a major cultural and digital transformation. Whether you are a developer, architect, or transformation leader, this book helps you build secure, scalable, and resilient systems.

WHAT YOU WILL LEARN
● Align governance with Agile, secure, and scalable workflows.
● Architect robust security with Zero Trust pipelines and advanced threat modelling.
● Accelerate automation using platform-based engineering best practices.
● Integrate security across development and delivery pipelines.
● Build hybrid team structures and leverage open source in the cloud era.
● Enable intelligent automation across the DevSecOps lifecycle using AI.
● Scale enterprise DevSecOps across applications using standardize and optimize strategies.
● Master VSM, SLAs, and KPIs for continuous DevSecOps success and governance.

WHO THIS BOOK IS FOR
This book is for enterprise leaders, IT professionals, product companies, IT services firms, Global Capability Centers (GCCs), as well as for universities offering advanced courses in computer science and information technology. Readers should have foundational knowledge of Agile, DevOps principles, CI/CD pipelines, and basic cloud concepts before diving in. This book is intended for a wide spectrum of professionals and organizations driving digital transformation through DevSecOps.

1. Getting Started with DevSecOps
2. Continuous Paradigm
3. Enterprise Scale DevSecOps
4. Understanding Security in DevSecOps
5. Understanding Quality Assurance in DevSecOps
6. Team Structure for DevSecOps Implementation
7. The Open Source Movement
8. The Cloud Era
9. Platform Approach for DevSecOps
10. Architecture Learnings for Scaled DevSecOps Adoption
11. Architecting Advanced DevSecOps with Site Reliability Engineering
12. Artificial Intelligence, Machine Learning and DevSecOps
13. DevSecOps Offshoots
14. DevSecOps Prophecies
15. IT Transformation Journey in a Large Enterprise
Appendix

● Naresh Balaram Choudhary: As the Senior Vice President and Head of Enterprise Productivity and Engineering Excellence at Infosys, Naresh Choudhary leads strategic programs focused on innovation, quality, and secure software delivery. With over 25 years at Infosys, Naresh has held diverse roles across software delivery, consulting, quality assurance, open source, enterprise platforms, products, tools, and technology—driving key transformation programs and shaping enterprise-wide adoption of DevSecOps, Agile governance, and AI-first software engineering.

Naresh brings deep expertise in software development, quality system design, process implementation, product and platform engineering, software reuse, knowledge management, and assessments. He has a strong command of frameworks such as CMMI, ISO, Six Sigma, MBNQA, Agile, DevSecOps, and SRE. He has also formulated Infosys’ early open source strategy and currently leads efforts to reimagine tooling, digital platforms, Lean, Automation, and GenAI. Naresh actively contributes to product councils and advisory boards with Infosys’ global technology partners, championing engineering excellence and secure, scalable innovation.

● Krishna Kanth B. N.: As the Principal Technology Architect at Infosys, Krishna Kanth brings deep expertise in enterprise automation, platform engineering, and DevSecOps strategy. Based in Bengaluru, he plays a pivotal role in scaling secure delivery practices across global teams and has contributed to multiple transformation initiatives.

His primary areas of expertise include Java/J2EE, software tools, and platforms in design, architecture, development, testing, and DevSecOps areas. He has also played consulting roles for multiple clients in the Australia and New Zealand region.

He currently leads the platform engineering teams at Automation Group in Quality and Productivity unit and anchors the platforms in DevSecOps, modernisation and test automation space. He also actively engages with clients and Infosys teams to provide solutions to improve efficiency and quality in project execution.

● Chidambaram GS: Chidambaram GS is a seasoned technologist and AI architect with over 19 years of progressive experience in the IT industry. Currently serving as a Principal Technologist at Infosys, Chennai, he specializes in architecting Agentic AI systems that are transforming enterprises through generative AI.

His expertise encompasses the full software development lifecycle, including solution architecture, system design, hands-on coding, and end-to-end delivery of robust technology solutions. He is known for developing intelligent solutions that convert unstructured data into actionable insights, leveraging advanced multi-agent frameworks built with Python and Golang.

With a strong background in microservices architecture and scalable backend systems, Chidambaram combines deep technical knowledge with a passion for continuous learning. He is committed to guiding organizations and teams through the complexities of modern software development, AI adoption, and deployment, always staying ahead in the rapidly evolving technology landscape.