Staff Engineer - DevSecOps - Enterprise Engineering

The TJX Companies, Inc.•Marlborough, MA

2d•Onsite

About The Position

The Enterprise Engineering function supports product teams and shared service partners by delivering foundational services such as Enterprise Tools, DevSecOps, and Performance & Quality Engineering. Our mission is to drive operational excellence and innovation across global IT products through integrated deployment, testing, performance engineering, labs, and automation. A Staff Engineer in Enterprise Engineering needs to be strong in DevSecOps, you will play a key role in leading the design and implementation of secure CI/CD pipelines, collaborating with engineering, operations, and security teams, and driving governance and compliance initiatives.

Requirements

6+ years of IT experience, including 3+ years with DevSecOps tools like Ansible, Jenkins, Artifactory, Jira, Confluence, SonarQube, Terraform, GitHub Actions, Git.
3+ years of scripting/coding experience preferably - Groovy, Python.
Strong knowledge of Azure Cloud, containerization (Docker), and orchestration (Kubernetes).
Familiarity with security tools and practices (SAST, DAST, vulnerability management).
Experience with compliance and audit processes.
Excellent problem-solving, communication, and collaboration skills.
Ability to clearly convey technical information across organizational levels.

Nice To Haves

Experience working in a SAFe Agile environment.
Extensive knowledge of DevSecOps principles and standards.
Proven history of technical leadership and community building.
Strong understanding of best practices and ability to collaborate on governance process development.
Excellent knowledge of SOX compliance, audit processes, and experience working with external auditors (e.g., PwC).

Responsibilities

Partner with product teams to integrate DevSecOps practices into workflows and promote DevOps adoption across the organization.
Design, implement, and manage secure CI/CD pipelines, automating security processes and integrating them into delivery pipelines.
Conduct security assessments and audits of systems and applications.
Develop and maintain security documentation and best practices.
Create reusable solutions, patterns, and shared libraries for CI/CD pipelines to enable faster builds and deployments.
Collaborate with cross-functional teams to ensure secure and efficient software delivery and consult on DevSecOps requirements for diverse applications.
Troubleshoot and resolve issues in the DevSecOps domain while driving continuous improvement.
Mentor and guide engineers on DevSecOps principles, automation, and secure coding practices.