Development, Security, and Operations Engineer
About the role
We are seeking a Development, Security, and Operations "DevSecOps" Engineer to support and scale the organization’s citizen development initiatives. This role works closely with non-traditional developers — analysts, business users, and rapid prototypers — to transition experimental or prototype applications into secure, supportable, and production-ready solutions. The DevSecOps Engineer acts as the connective tissue between business-driven innovation and enterprise engineering standards — emphasizing enablement over gatekeeping, while enforcing sound software development lifecycle, security, and operational practices. This position is designed to offload and formalize a significant portion of the day-to-day operational work currently performed by senior engineers, allowing them to focus on higher-order architecture, platform design, and governance. This position is a full-time exempt role and can be based in any of our U.S. office locations and some remote locations.
Responsibilities
- Partner directly with citizen developers to refactor, harden, and productionize applications built with Python, JavaScript, and low-code/automation platforms.
- Guide developers on repository structure, branching strategies, pull requests, and versioning.
- Translate loosely defined or experimental solutions into maintainable, supportable codebases.
- Establish, document, and enforce SDLC best practices including source control standards, CI/CD pipelines for build, test, and deployment, and environment separation (development, UAT, production).
- Create and maintain reusable DevSecOps “golden paths” including standardized pipeline templates, deployment frameworks, and secure configuration and secrets management patterns.
- Perform code reviews with emphasis on security vulnerabilities, error handling, resilience, and maintainability.
- Integrate and operate automated security tooling: SAST, dependency/vulnerability scanning, and secrets detection.
- Work closely with security teams to ensure applications meet enterprise requirements without unnecessary friction.