DevSecOps Engineer

KPMG•Edmonton, Ontario

About The Position

KPMG in Canada is seeking a DevSecOps Engineer to support enterprise DevSecOps platforms, cloud-native technologies, application security, developer enablement, and software delivery automation. The role focuses on CI/CD platform operations, Kubernetes and cloud infrastructure support, API management, Infrastructure as Code (IaC), security integration, troubleshooting, vendor coordination, and continuous improvement across the Secure Software Development Lifecycle (SSDLC). The DevSecOps Engineer supports application security practices throughout the SSDLC, administers Azure DevOps and GitHub Enterprise, develops and supports Terraform-based infrastructure automation, and assists with Azure API Management and cloud and container platforms. The role also provides technical support for developers and DevSecOps tooling, tracks software licensing and vendor commitments, monitors platform health, supports upgrades and incident troubleshooting, maintains documentation, and assists with compliance and continuous improvement initiatives.

Requirements

At least 2 years of experience in DevOps, DevSecOps, Application Security, Cloud Engineering, Enterprise Platform Support, or a related field.
Strong understanding of the Software Development Lifecycle (SDLC) and Secure SDLC practices.
Hands-on experience with GitHub Actions and Azure DevOps Pipelines, including CI/CD automation.
Experience with Git, source code repositories, and branching strategies.
Working knowledge of Kubernetes, containerized applications, and cloud-native technologies.
Experience with Infrastructure as Code concepts and tools such as Terraform.
Understanding of application security concepts and practices, including SAST, DAST, SCA, secrets management, and vulnerability management.
Familiarity with Azure cloud services, including AKS, Key Vault, API Management, and identity and access management concepts.
Basic scripting skills in PowerShell, Python, or Bash, with an interest in using automation to improve engineering and operational processes.
Strong analytical, troubleshooting, and problem-solving skills, including the ability to assess technical issues and identify practical solutions.
Strong communication and documentation skills, with a customer-focused approach to developer support and enablement.
Ability to collaborate effectively with developers, cybersecurity teams, platform engineers, vendors, and other stakeholders.
A continuous-learning mindset and interest in emerging technologies and improving operational processes.
Written and oral fluency in English; the successful candidate must support or collaborate with English-speaking colleagues or stakeholders nationally in KPMG’s English-speaking provinces.

Nice To Haves

Experience supporting enterprise DevSecOps platforms and developer tools.
Familiarity with API security, REST APIs, software supply chain security, and cloud security principles.
Exposure to AI-assisted software development, automation, and operational tooling.
Knowledge of the OWASP Top 10, secure coding practices, and enterprise governance frameworks.
Experience with software licensing, vendor coordination, or ITSM platforms such as ServiceNow.
Relevant certifications in Azure, Kubernetes, GitHub, Terraform, or DevOps.

Responsibilities

Support application security practices throughout the SSDLC, including SAST, DAST, SCA, secrets management, vulnerability management, secure coding initiatives, and remediation coordination.
Administer Azure DevOps and GitHub Enterprise, including repositories, pipelines, access controls, integrations, governance, and release automation.
Develop and support Terraform-based infrastructure automation, including environment provisioning, configuration management, and deployment standardization.
Support Azure API Management, including API onboarding, configuration, lifecycle management, security policies, governance, and troubleshooting.
Assist with Azure resources and services, including AKS, virtual machines, Azure Key Vault, containerized workloads, and identity management.
Provide technical support for DevSecOps platforms, CI/CD pipelines, development tooling integrations, secure development practices, and developer onboarding.
Track software licensing, utilization, renewals, vendor support cases, escalations, and service commitments.
Monitor platform health, support upgrades, troubleshoot incidents, maintain documentation, assist with automation initiatives and compliance requirements, and contribute to continuous improvement programs.