Automation Support)

Cherry Bekaert•US VA, VA

2d•$111,000 - $147,000

About The Position

We are seeking a highly skilled Azure DevSecOps Engineer to design, implement, and support secure, automated cloud infrastructure using Infrastructure as Code (IaC) principles. This role will be responsible for driving automation, embedding security into the software delivery lifecycle, and enabling scalable, compliant Azure environments. The ideal candidate combines deep expertise in Terraform, Azure DevOps, and CI/CD automation with strong knowledge of cloud security, governance, and operational support.

Requirements

5+ years experience in DevOps / DevSecOps / Cloud Engineering
Strong hands-on experience with: Terraform (required)
Strong hands-on experience with: Azure (IaaS, PaaS, identity, networking)
Strong hands-on experience with: CI/CD tools (Azure DevOps, GitHub Actions, Jenkins)
Experience implementing Infrastructure as Code in enterprise environments
Proficiency in scripting/automation (PowerShell, Bash, or Python)
Experience with security integration in CI/CD pipelines
Strong understanding of cloud security, IAM, and compliance frameworks

Nice To Haves

Experience with: Azure Kubernetes Service (AKS), containers, or microservices
Experience with: Policy-as-code tools (OPA, Sentinel, Checkov)
Experience with: Monitoring tools (Azure Monitor, Log Analytics, Prometheus)
Certifications: Microsoft Azure certifications (e.g., AZ-400, AZ-500)
Certifications: HashiCorp Terraform Associate
Experience in regulated environments a plus (SOX, SOC2, etc.)

Responsibilities

Design, build, and maintain reusable Terraform modules for Azure infrastructure provisioning (networking, compute, identity, storage)
Ensure all infrastructure is version-controlled, auditable, and deployed via automated pipelines
Implement policy-as-code and security baselines within Terraform configurations
Perform code reviews and enforce IaC standards across engineering teams
Design and maintain secure CI/CD pipelines using Azure DevOps, GitHub Actions, or similar tools
Integrate automated security scanning (SAST, DAST, IaC scanning) into deployment pipelines
Build and support automated deployment orchestration (blue/green, canary, rollback strategies)
Automate provisioning, configuration, and deployment workflows to reduce manual effort
Architect, deploy, and manage secure Azure cloud environments
Implement governance controls including RBAC, Azure Policy, and identity management
Design scalable and resilient infrastructure aligned with business and security requirements
Optimize cloud environments for performance, cost, and reliability
Embed security controls and compliance checks into infrastructure and pipelines
Conduct vulnerability assessments and remediate risks proactively
Manage secrets, certificates, and keys using secure vault solutions (e.g., Azure Key Vault)
Ensure adherence to regulatory and organizational security standards
Provide automation and platform support for build, release, and infrastructure pipelines
Troubleshoot CI/CD, IaC deployments, and cloud infrastructure issues
Develop and maintain self-service automation tools for engineering teams
Monitor systems, respond to incidents, and continuously improve reliability
Partner with Dev, Sec, and IT teams to integrate security into development workflows
Provide guidance and best practices on DevSecOps and IaC adoption
Support onboarding of applications into standardized DevSecOps pipelines
Document processes, patterns, and reusable frameworks