Senior DevSecOps Engineer (Azure Experience) - Remote (USA)

Echelon Risk + Cyber•Washington, DC

5d•Remote

About The Position

Echelon Risk + Cyber is hiring a Senior DevSecOps Engineer with deep Microsoft Azure expertise for a remote, client-facing consulting role. The engineer will be embedded with a dedicated client for an extended engagement and serve as the primary technical liaison between Echelon’s Security Team and the client’s application development team. The role combines hands-on security engineering, consulting, and collaboration to embed security throughout the software development lifecycle. As engagements mature, the engineer may also contribute to other application security work across Echelon’s client portfolio. The engineer will design and maintain secure, automated CI/CD pipelines; harden cloud infrastructure; and connect development, operations, and security practices. The role also includes advising client teams, improving application and cloud security, automating security processes, and supporting incident response. The successful candidate will work within client tools, processes, and release schedules, influence teams without direct authority, and communicate technical and business risks effectively. Echelon describes its culture as inclusive and integrity-driven, with opportunities to engage with clients, business partners, and emerging technology. The company seeks proactive team members who can adapt to a changing environment and help build creative cybersecurity solutions. The position can be performed remotely from anywhere in the United States. Applicants must be authorized to work in the United States without current or future visa sponsorship; resumes must be in English.

Requirements

Experience delivering in a consulting, professional services, or managed services environment.
Demonstrated ability to work as an embedded resource on a long-running client engagement and operate within the client’s tools, processes, and release cadence.
Ability to influence developers and engineering leaders without direct authority.
Excellent communication skills, including the ability to explain security risks in business terms to technical and non-technical stakeholders.
At least 5 years of experience in DevOps or DevSecOps roles, including at least 3 years focused specifically on Microsoft Azure.
Experience building and securing CI/CD pipelines using Azure DevOps, GitHub Actions, or a similar tool.
Hands-on experience with Azure security tooling, including Defender for Cloud, Sentinel, Key Vault, Azure Policy, and Entra ID.
Proficiency with infrastructure-as-code tools such as Terraform, Bicep, or ARM templates.
Experience with Docker, AKS/Kubernetes, and associated security controls.
Scripting and automation skills using PowerShell, Python, or Bash.
Working knowledge of security scanning tools such as Trivy, Snyk, SonarQube, Checkmarx, or Qualys.
Understanding of network security fundamentals, including NSGs, firewalls, VPNs, and private endpoints, and application security fundamentals, including OWASP Top 10 and API security.
Familiarity with compliance and regulatory frameworks such as SOC 2, ISO 27001, NIST, CIS, and GDPR as applicable.
Authorization to work in the United States without current or future visa sponsorship.
Submit a resume in English.
Hold or be actively working toward relevant credentials in both cloud security and application security. Listed cloud security credentials include AZ-500, SC-100, AZ-400, CCSP, or AWS Certified Security Specialty; listed application security credentials include CSSLP, GWAPT, GWEB, OSWE, or an equivalent secure development credential.

Nice To Haves

AWS experience, particularly in multi-cloud environments or migrations between providers.
Prior experience as an embedded or dedicated consultant supporting a single enterprise client over a multi-month or multi-year engagement.
Experience with policy-as-code, including OPA/Gatekeeper or Azure Policy.
Background in threat modeling, including STRIDE or DREAD, and secure SDLC frameworks such as OWASP SAMM or BSIMM.
Experience in regulated industries such as finance, healthcare, or government.
Prior experience leading a security tooling migration or DevSecOps transformation.
Experience supporting multiple concurrent client engagements or transitioning between client accounts.
Broader industry certifications such as CISSP, CISM, CEH, or OSCP.

Responsibilities

Serve as the primary technical liaison between Echelon’s Security Team and the client’s application development team during an extended embedded engagement.
Build relationships with client developers, DevOps engineers, architects, and engineering leaders, and provide practical security guidance.
Translate Echelon security requirements into engineering practices that fit the client’s sprint cadence and release schedule.
Represent Echelon in client ceremonies, including sprint planning, architecture reviews, change advisory boards, and security design reviews.
Escalate risks, blockers, and scope changes to Echelon leadership and communicate status to client stakeholders.
Document decisions, standards, and remediation guidance for transferability and lasting client value.
Contribute to additional application security engagements across Echelon’s client portfolio as opportunities arise.
Design, build, and maintain secure CI/CD pipelines in Azure DevOps and GitHub Actions, integrating SAST, DAST, SCA, and container scanning.
Embed threat modeling, secure coding, and secrets management into development workflows.
Triage and prioritize scanner findings with developers, distinguishing actionable risks from noise.
Support secure code reviews, application threat modeling, and secure design for new and existing applications.
Define and track application security metrics that demonstrate improvement in client security posture.
Architect and manage secure infrastructure as code using Terraform, Bicep, or ARM templates.
Implement and manage Azure security services, including Microsoft Defender for Cloud, Microsoft Sentinel, Azure Key Vault, Azure Policy, Entra ID Conditional Access, and Network Security Groups.
Build and maintain security practices for Azure Kubernetes Service, including image scanning, admission controls, and runtime protection.
Enforce least-privilege IAM practices and secrets rotation using Key Vault and Managed Identities.
Extend security practices to AWS for multi-cloud or migrating client workloads.
Automate vulnerability management, patching workflows, and compliance checks across cloud and hybrid environments.
Create and maintain security monitoring, logging, and alerting using Azure Monitor, Log Analytics, and SIEM integrations.
Lead incident response for pipeline, cloud, or infrastructure security events.
Mentor client and Echelon engineers, promote DevSecOps practices, and stay current on threats, Azure security features, and compliance frameworks.

Benefits

Medical, dental, and vision insurance through Cigna, with the employer covering the majority of employee costs.
Employer funding for HSA accounts and access to an FSA.
401(k) through Vanguard with a guaranteed employer contribution.
Flexible vacation policy.
11 holidays, with flexibility based on personal priorities.
Maternity leave and non-birthing parent leave.
Employer-paid short-term and long-term disability insurance.
Employer-paid life insurance and access to additional life insurance, hospital coverage, and accidental coverage.
Discounted mental health support.
Support for individual development through certifications, continued learning, and conferences.
Accommodation support for employees with special needs.