DevSecOps Engineer

We are seeking an experienced Senior DevSecOps Engineer to integrate security into our software development, CI/CD, and infrastructure operations. The ideal candidate will have strong expertise in Microsoft Azure, secure pipeline engineering, infrastructure automation, and vulnerability management.

You will collaborate with development, operations, security, manufacturing, and global engineering teams to build secure, reliable, and scalable environments while supporting continuous delivery and operational excellence.

Key Responsibilities

• Design, implement, and maintain secure CI/CD pipelines using Jenkins, GitLab CI/CD, or Azure DevOps.
• Integrate automated security testing, including SAST, DAST, SCA, vulnerability scanning, and security gates.
• Secure cloud infrastructure, with a strong focus on Microsoft Azure and hybrid environments.
• Implement Infrastructure as Code (IaC) and configuration management using Terraform and Ansible.
• Apply security best practices across Docker containers, Kubernetes clusters, APIs, and microservices.
• Develop automation scripts using Python, Bash, or PowerShell.
• Conduct security assessments, identify vulnerabilities, and coordinate remediation activities.
• Implement security monitoring, logging, alerting, and incident response processes.
• Establish and enforce security policies for infrastructure provisioning, configuration, and deployment.
• Collaborate with development, operations, manufacturing, and security teams to ensure secure and reliable releases.
• Support deployment projects, coordinate with third-party vendors, and assess the impact of new features on existing systems.
• Mentor junior engineers and promote security awareness and continuous improvement.

Required Qualifications

• Bachelor's degree in Computer Science, Engineering, Information Technology, or a related field.
• 7+ years of experience in software development, systems administration, IT support, SRE, build and release engineering, networking, QA, or related technical roles.
• At least 3 years of hands-on DevOps or DevSecOps experience.
• Strong understanding of security principles, including encryption, authentication, authorization, identity management, and network security.
• Hands-on experience building and securing CI/CD pipelines.
• Experience integrating security tools for SAST, DAST, SCA, vulnerability scanning, and security testing.
• Strong knowledge of Microsoft Azure and cloud infrastructure security.
• Proficiency in scripting and automation using Python, Bash, or PowerShell.
• Practical experience with Docker, Kubernetes, and container security.
• Strong troubleshooting, communication, collaboration, and problem-solving skills.

Preferred Qualifications

• Experience with Azure Local, Azure Stack, or on-premises AKS environments.
• Experience with Terraform for infrastructure provisioning and automation.
• Experience with Ansible for configuration management across Linux and Windows environments.
• Familiarity with Apache Kafka or similar event-streaming platforms.
• Knowledge of secure coding practices, API security, and microservices architecture.
• Experience with monitoring and logging tools such as Azure Monitor, Checkmk, Nagios, ELK Stack, Splunk, or Prometheus.
• Relevant certifications, such as Azure Security Engineer Associate, Azure DevOps Engineer Expert, or Azure Solutions Architect Expert.