DevSecOps Engineer, Engineering & Operations
About The Position
This position is responsible for designing, implementing, and supporting secure automation, Infrastructure as Code, and continuous integration and continuous delivery (CI/CD) capabilities across the organization’s technology environment. This role serves as a technical bridge between Infrastructure Engineering, Operations team, IT Security, Cloud Engineering, and Application Development. The DevSecOps Engine embeds security controls, automation, and governance through the technology lifecycle while enabling engineering teams to deliver scalable infrastructure, applications securely, consistently and efficiently. The ideal candidate is an automation-focused with strong infrastructure and security driven experience who understands how to transform traditional operational processes into repeatable policy-driven, and automated engineer practices. This position will play a key role in advancing DevSecOps, Infrastructure as Code, secure configuration management, vulnerability remediate, and platform engineering capabilities across on-premise and cloud environments.
Requirements
- Requires a Bachelor of Science Degree with an emphasis in Information Technology/Systems, Computer Science, IT Engineering, or equivalent experience.
- Requires 5–7 years of related infrastructure engineering experience.
- Seven or more years of experience in DevOps, DevSecOps, Infrastructure Engineering, Systems Engineering, Cloud Engineering, or Security Engineering.
- Strong hands-on experience with infrastructure automation and Infrastructure as Code.
- Experience with Terraform, Ansible, PowerShell, Python, Bash, VMware Aria, ARM/Bicep, or similar automation technologies.
- Experience building or supporting CI/CD pipelines using Azure DevOps, GitLab, Jenkins, GitHub Actions, Bitbucket, or similar platforms.
- Strong understanding of Windows Server, Linux, VMware vSphere, networking, storage, cloud, and identity technologies.
- Experience integrating security controls into infrastructure and software delivery processes.
- Knowledge of vulnerability management, secure configuration, patch automation, system hardening, and remediation workflows.
- Experience with Microsoft Azure, Microsoft Entra ID, Active Directory, RBAC, and hybrid identity environments.
- Strong troubleshooting, documentation, communication, and cross-functional collaboration skills.
Nice To Haves
- Experience working in a credit union, bank, financial services, healthcare, government, or other regulated environment.
- Familiarity with FFIEC, NCUA, GLBA, NIST Cybersecurity Framework, CIS Controls, and audit/regulatory expectations.
- Experience with VMware NSX, Horizon VDI, Azure networking, hybrid cloud, and enterprise infrastructure modernization.
- Experience with SAST, DAST, software composition analysis, container scanning, secrets management, and IaC security scanning.
- Experience with Jira, Jira Service Management, Confluence, ServiceNow, or similar ITSM and Agile tools.
- Experience with privileged access management, endpoint security, vulnerability scanning, and security orchestration tools.
- Experience with Docker, Kubernetes, Helm, or OpenShift.
- Certifications such as Azure DevOps Engineer, Azure Solutions Architect, Security+, CISSP, CCSP, Terraform, Ansible, VMware VCP, or Kubernetes certification preferred.
Responsibilities
- Design, implement, and maintain secure DevSecOps automation frameworks across infrastructure, cloud, application, and security platforms.
- Build and support CI/CD pipelines for application, infrastructure, and configuration deployment across development, testing, staging, and production environments.
- Develop Infrastructure as Code using tools such as Terraform, Ansible, VMware Aria, ARM/Bicep, PowerShell, Python, or Bash.
- Automate provisioning, configuration management, patching, vulnerability remediation, and security hardening across Windows, Linux, VMware, Azure, and hybrid environments.
- Integrate security controls into CI/CD pipelines, including vulnerability scanning, secrets detection, code scanning, configuration validation, and policy enforcement.
- Partner with Cybersecurity to support vulnerability management, security remediation, risk mitigation, penetration test findings, and audit response activities.
- Implement automated compliance and configuration checks aligned with FFIEC, NCUA, CIS, NIST, and internal security standards.
- Support secure cloud and identity governance across Microsoft Azure, Entra ID, RBAC, privileged access, service principals, and managed identities.
- Develop automation to improve operational reliability, monitoring, observability, incident response, and post-deployment validation.
- Partner with Infrastructure teams on VMware vSphere, NSX, Horizon, storage, server, network, and cloud modernization initiatives.
- Collaborate with Application Development teams to improve secure release management, deployment automation, source control, and SDLC practices.
- Support container and platform engineering capabilities using Docker, Kubernetes, or similar technologies.
- Create reusable automation templates, deployment standards, technical documentation, architecture diagrams, and operational runbooks.
- Promote security-by-design, automation-first, GitOps, and DevSecOps practices across technology teams.
- Evaluate emerging technologies and recommend improvements that enhance security, reliability, efficiency, and scalability.
- Exercises discretion and independent decision-making in IT necessary to ensure the growth of the credit union in a manner that supports the credit union’s mission and increases the profitability of the organization.
- Performs other duties as required.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
