DevSecOps Engineer

Saxon Global•Austin, TX

About The Position

The DevSecOps Engineer will support the administration, implementation, maintenance, and adoption of enterprise software development, security, and delivery platforms. This role will serve as a technical subject matter expert responsible for integrating security, automation, and operational best practices into the software development lifecycle (SDLC). The engineer will collaborate with development teams, infrastructure teams, cybersecurity personnel, and business stakeholders to improve software quality, security posture, and delivery efficiency.

Requirements

3 years of DevSecOps methodologies and best practices
3 years of CI/CD pipeline development and automation
3 years of Source code management and repository administration
3 years of Application security testing tools and practices
3 years of Scripting and automation
2 years of Experience administering and supporting AWS and/or Azure cloud environments, including cloud infrastructure, security, networking, automation, Infrastructure as Code (IaC), container platforms, and CI/CD integrations.

Nice To Haves

2 years of Experience administering code suggestion and AI-assisted development platforms
2 years of Experience planning and execution migrations involving source code repositories, CI/CD platforms or DevSecOps toolchains
2 years of Experience supporting application modernization, cloud migration, and DevSecOps tool integrations within cloud-hosted environments is highly desired
Cloud certifications

Responsibilities

Administer and maintain the Veracode platform, including user provisioning, role management, policy configuration, and system governance.
Support onboarding of application teams to Veracode security scanning capabilities.
Configure and support SAST, DAST, SCA, container, and other application security scanning services.
Assist development teams with vulnerability remediation activities and security best practices.
Develop documentation, standards, training materials, and operational procedures.
Administer and maintain SonarQube environments, projects, quality profiles, quality gates, and user access controls.
Onboard application teams and integrate SonarQube into CI/CD pipelines.
Support code quality initiatives and assist teams with remediation of technical debt and code quality issues.
Establish and maintain enterprise coding standards and reporting metrics.
Administer and maintain GitLab Self-Managed environments.
Configure projects, groups, repositories, runners, permissions, integrations, and security settings.
Perform platform upgrades, maintenance, monitoring, troubleshooting, and capacity management.
Support source code migration and repository onboarding activities.
Maintain operational procedures, standards, and platform documentation.
Design, build, maintain, and optimize CI/CD pipelines using GitLab.
Develop reusable pipeline templates and automation frameworks.
Integrate security testing, code quality validation, compliance controls, and deployment automation into software delivery workflows.
Support Infrastructure-as-Code (IaC), automated testing, release management, and deployment processes.
Implement DevSecOps best practices to improve reliability, consistency, and delivery velocity.
Administer Jira projects, workflows, permissions, issue types, dashboards, reports, and automation rules.
Support project teams with onboarding, configuration, and governance activities.
Configure integrations between Jira and software development platforms including GitLab and other enterprise tools.
Develop reporting and dashboards to improve project visibility and operational metrics.