DevSecOps Engineer

About the role

The DevSecOps Engineer will support the administration, implementation, maintenance, and adoption of enterprise software development, security, and delivery platforms. This role will serve as a technical subject matter expert responsible for integrating security, automation, and operational best practices into the software development lifecycle (SDLC). The engineer will collaborate with development teams, infrastructure teams, cybersecurity personnel, and business stakeholders to improve software quality, security posture, and delivery efficiency.

Responsibilities

• Administer and maintain the Veracode platform, including user provisioning, policy configuration, and supporting the onboarding of application teams.
• Configure and support SAST, DAST, SCA, container, and other application security scanning services.
• Administer and maintain SonarQube environments, projects, quality profiles, quality gates, and user access controls.
• Administer and maintain GitLab Self-Managed environments, including performing platform upgrades, maintenance, and capacity management.
• Design, build, maintain, and optimize CI/CD pipelines using GitLab.
• Integrate security testing, code quality validation, compliance controls, and deployment automation into software delivery workflows.
• Administer Jira projects, workflows, permissions, dashboards, and automation rules.
• Develop documentation, standards, training materials, and operational procedures for DevSecOps platforms.

Required Qualifications

• 3 years of experience with DevSecOps methodologies and best practices.
• 3 years of experience in CI/CD pipeline development and automation.
• 3 years of experience with source code management and repository administration.
• 3 years of experience with application security testing tools and practices.
• 3 years of experience with scripting and automation.
• 2 years of experience administering and supporting AWS and/or Azure cloud environments, including cloud infrastructure, security, networking, automation, Infrastructure as Code (IaC), container platforms, and CI/CD integrations.

Preferred Qualifications

• Experience administering code suggestion and AI-assisted development platforms.
• Experience planning and executing migrations involving source code repositories, CI/CD platforms, or DevSecOps toolchains.
• Experience supporting application modernization, cloud migration, and DevSecOps tool integrations within cloud-hosted environments.
• Cloud Certifications (AWS and/or Azure related certifications are preferred).