Principal DevSecOps Engineer

Senior DevSecOps Engineer

Location: Remote; United States

Terms: 6-month W-2 contract to hire

***Not open to C2C or third-party candidates per end client requirements

Capstone IT is helping our client to hire a Principal level DevSecOps Engineer to help modernize and standardize software delivery across the enterprise. This role focuses on building secure, automated CI/CD pipelines, improving developer productivity through self-service engineering platforms, and implementing software delivery standards that can be adopted across multiple engineering teams.

The ideal candidate has hands-on experience with DevSecOps, software supply chain security, CI/CD automation, and internal developer platforms. This individual will work closely with engineering teams to build reusable deployment patterns, automate governance, improve software delivery metrics, and mentor developers on engineering best practices.

Responsibilities

• Design and implement automated CI/CD pipelines with integrated security, quality, and architectural validation.
• Build and maintain immutable deployment pipelines using build-once, promote-through-environments practices.
• Develop self-service capabilities and standardized engineering templates within an internal developer portal.
• Implement software supply chain security including SBOM generation, dependency scanning, license compliance, and artifact repository governance.
• Establish engineering standards and reusable development patterns that improve consistency across teams.
• Develop technology governance and OSS intake processes that balance security with developer productivity.
• Measure engineering effectiveness using DORA metrics and developer platform health indicators.
• Mentor engineering teams and promote adoption of modern software delivery practices.

Required Technical Skills

• CI/CD Pipeline Automation
• GitHub Actions, GitLab CI, Jenkins, Azure DevOps, self-hosted runners
• DevSecOps & Software Supply Chain Security
• SBOM, dependency scanning, license compliance, JFrog/Artifactory, OSS governance
• Internal Developer Platforms
• Developer portals, Golden Paths/Paved Roads, Backstage or similar self-service platforms
• Artifact Management & Deployment Automation
• Immutable artifacts, build-once/promote-through-environments, artifact repositories
• Software Engineering
• Strong coding experience with modern languages and familiarity with legacy Java applications

Nice-to-Have Skills

• DORA Metrics
• Engineering Scorecards
• Platform Engineering
• Developer Experience (DevEx)
• Java/EJB modernization
• Technical mentoring
• Engineering governance

Education and Experience

• Bachelor’s Degree in Computer Science or similar field of study
• Minimum 10 years of related experience in an enterprise level environment

Capstone Consulting is an EEO employer.

Capstone website: http://www.capstonec.com/

Like us on Facebook: https://www.facebook.com/CapstoneITStaffingSolutions/

Follow us on Twitter: https://twitter.com/capstone\_\_IT/

Connect with us on LinkedIn: https://linkedin.com/company/capstone-consulting/