Senior DevSecOps Engineer (Azure Experience) - Remote (USA)

Echelon Risk + Cyber•Washington D. C., DC

4d•Remote

About The Position

Echelon Risk + Cyber is hiring a Senior DevSecOps Engineer with deep Microsoft Azure expertise for a remote, client-facing consulting role. The engineer will be embedded with a dedicated client for an extended engagement, serving as the primary technical liaison between Echelon’s Security Team and the client’s application development team. The role combines hands-on engineering with client partnership: designing and maintaining secure, automated CI/CD pipelines, hardening cloud infrastructure, and integrating development, operations, and security practices. As the engagement matures, the engineer may contribute to additional application security engagements across Echelon’s client portfolio. The role focuses on secure software development lifecycle practices, application security, Azure cloud security engineering, automation, monitoring, and incident response. The engineer will work within client tools, processes, sprint cadence, and release schedule, translating security requirements into practical guidance and helping client teams achieve measurable improvements in security posture. The position is remote from anywhere in the United States. Applicants must be authorized to work in the United States without current or future visa sponsorship.

Requirements

At least 5 years of experience in DevOps or DevSecOps roles, including at least 3 years focused specifically on Microsoft Azure.
Experience delivering in a consulting, professional services, or managed services environment.
Demonstrated ability to work as an embedded resource on a long-running client engagement, using the client’s tools, processes, and release cadence.
Ability to influence without authority and drive security outcomes through developers and engineering leaders.
Excellent communication skills, including the ability to explain security risk to technical and non-technical stakeholders.
Proven experience building and securing CI/CD pipelines with Azure DevOps, GitHub Actions, or similar tools.
Hands-on experience with Azure security tools including Defender for Cloud, Sentinel, Key Vault, Azure Policy, and Entra ID.
Proficiency with infrastructure-as-code tools such as Terraform, Bicep, or ARM templates.
Experience with Docker and AKS/Kubernetes and related security controls.
Scripting and automation skills with PowerShell, Python, or Bash.
Working knowledge of security scanning tools such as Trivy, Snyk, SonarQube, Checkmarx, or Qualys.
Understanding of network security fundamentals, including NSGs, firewalls, VPNs, and private endpoints, and application security fundamentals, including OWASP Top 10 and API security.
Familiarity with compliance and regulatory frameworks such as SOC 2, ISO 27001, NIST, CIS, and GDPR as applicable.
Authorization to work in the United States without current or future visa sponsorship.
Relevant cloud security and application security certifications, held or actively in progress. Listed cloud credentials include AZ-500, SC-100, AZ-400, CCSP, or AWS Certified Security Specialty; listed application security credentials include CSSLP, GWAPT, GWEB, OSWE, or an equivalent secure development credential.
Only resumes in English will be considered.

Nice To Haves

AWS experience, particularly in multi-cloud environments or cloud migrations.
Prior experience as an embedded or dedicated consultant supporting a single enterprise client over a multi-month or multi-year engagement.
Experience with policy-as-code, such as OPA/Gatekeeper or Azure Policy.
Background in threat modeling methods such as STRIDE or DREAD and secure SDLC frameworks such as OWASP SAMM or BSIMM.
Experience in regulated industries such as finance, healthcare, or government.
Prior experience leading a security tooling migration or DevSecOps transformation initiative.
Experience supporting multiple concurrent client engagements or transitioning between client accounts.
Broader industry certifications such as CISSP, CISM, CEH, or OSCP.

Responsibilities

Serve as the primary technical liaison between Echelon’s Security Team and the client’s application development team during an extended, embedded engagement.
Build trusted working relationships with client developers, DevOps engineers, architects, and engineering leadership.
Translate Echelon security requirements into practical engineering guidance that fits client sprint and release schedules.
Represent Echelon in client ceremonies, including sprint planning, architecture reviews, change advisory boards, and security design reviews.
Escalate risks, blockers, and scope changes to Echelon leadership and communicate status consistently to client stakeholders.
Document decisions, standards, and remediation guidance, and contribute to other application security engagements as opportunities arise.
Design, build, and maintain secure CI/CD pipelines in Azure DevOps and GitHub Actions, integrating SAST, DAST, SCA, and container scanning.
Embed threat modeling, secure coding practices, and secrets management into development workflows.
Triage and prioritize scanner findings with developers, and support secure code reviews, application threat modeling, and secure design guidance.
Define and track application security metrics to demonstrate improvements in the client’s security posture.
Architect and manage secure infrastructure-as-code using Terraform, Bicep, or ARM templates.
Implement and manage Azure security services, including Microsoft Defender for Cloud, Microsoft Sentinel, Azure Key Vault, Azure Policy, Entra ID Conditional Access, and Network Security Groups.
Build and maintain container security practices for AKS, including image scanning, admission controls, and runtime protection.
Develop and enforce IAM best practices, least-privilege access models, and secrets rotation policies using Key Vault and Managed Identities.
Extend security practices to AWS when client workloads are multi-cloud or migrating between providers.
Automate vulnerability management, patching workflows, and compliance checks across cloud and hybrid environments.
Create and maintain security monitoring, logging, and alerting using Azure Monitor, Log Analytics, and SIEM integrations.
Lead incident response efforts related to pipeline, cloud, or infrastructure security events.
Mentor client and Echelon engineers, promote DevSecOps culture, and stay current on threats, Azure security features, and compliance frameworks.

Benefits

Medical, dental, and vision insurance through Cigna, with the majority of employee costs covered by the employer.
Employer funding for HSA accounts and access to an FSA.
401(k) through Vanguard with a guaranteed employer contribution.
Flexible vacation policy.
11 holidays, with flexibility based on individual priorities.
Family-friendly benefits, including maternity leave and non-birthing parent leave.
Employer-paid short-term and long-term disability insurance.
Employer-paid life insurance and access to additional life insurance, hospital coverage, and accidental coverage.
Discounted mental health support.
Support for individual development through certifications, continued learning, and conferences.