DevSecOps & Platform Security Engineer - HN/DN/HCM

Purpose

The DevSecOps & Platform Security Engineer will support secure engineering, automation, release governance, and platform security across data, AI, interoperability, and cloud platform services.

This role ensures that platform services are delivered and operated using secure, automated, auditable, and compliant engineering practices.

Key Responsibilities

• Build, maintain, and improve secure CI/CD pipelines using Azure DevOps or equivalent tools.
• Define and support release governance, deployment standards, environment promotion, and engineering quality controls.
• Develop, review, and maintain Infrastructure-as-Code, preferably using Terraform.
• Implement reusable deployment templates, platform automation, configuration baselines, and environment provisioning patterns.
• Support DevSecOps controls including:

o Secure CI/CD pipelines

o Code scanning

o Dependency scanning

o Container/image scanning

o Infrastructure-as-Code scanning

o Secrets scanning

o Policy-as-code validation

• Support identity and access management, RBAC, privileged access, service principals, managed identities, and access reviews.
• Support secrets management, certificate management, key rotation, and secure configuration practices.
• Implement platform security baselines, guardrails, logging, monitoring, audit trails, and security observability.
• Support vulnerability management, audit readiness, compliance evidence collection, risk remediation, and security reporting.
• Provide technical oversight of vendor-delivered DevSecOps, security, automation, and IaC deliverables.

Required Skills / Experience

• 6+ years in DevOps, DevSecOps, cloud security, platform engineering, infrastructure engineering, or secure delivery operations.
• Strong hands-on experience with Azure DevOps, CI/CD pipelines, Git workflows, and release governance.
• Strong experience with Terraform or equivalent Infrastructure-as-Code tools.
• Experience implementing DevSecOps controls, automated scanning, policy-as-code, secrets scanning, and infrastructure security validation.
• Strong understanding of Azure security, IAM, networking, Key Vault, logging, monitoring, and cloud platform hardening.
• Experience with vulnerability management, security remediation, audit support, and compliance evidence collection.
• Experience supporting enterprise-scale production cloud platforms.
• Experience working with security, infrastructure, platform, data, application, and vendor teams.
• Experience securing Azure Databricks, Microsoft Fabric, Unity Catalog, Azure OpenAI, Microsoft Foundry, Copilot Studio, APIs, or FHIR platforms is preferred.