DevSecOps Engineer – Secure CI/CD & Cloud Environments

About the role

We are seeking a skilled DevSecOps Engineer to embed security throughout our production, staging, and development environments. You will integrate security tools into CI/CD pipelines, enforce robust access controls, and ensure compliance with industry standards.

Key responsibilities

• Integrate SAST, SCA, and DAST tools into Azure DevOps, GitHub or GitLab pipelines.
• Design and maintain secure CI/CD workflows and automate permission audits.
• Implement and manage Transparent Data Encryption, Row‑Level Security and Dynamic Data Masking for SQL Server.
• Enforce MFA, RBAC and quarterly access reviews across all accounts.
• Maintain strict environment separation and manage vulnerability identification, remediation and reporting.
• Support Change Advisory Board processes and maintain encrypted backups with regular restoration tests.

Required profile

• Minimum 3 years of experience in DevSecOps, DevOps or Security Engineering.
• Hands‑on experience securing .NET applications, SharePoint, SQL Server and Python‑based systems.
• Familiarity with security frameworks such as NIST, SOC 2 and ISO 27001.

Required skills

• .NET, SharePoint, SQL Server, Python, PowerShell, Bash.
• SAST/SCA tools: SonarQube, Snyk, Bandit, Safety, OWASP Dependency‑Check.
• CI/CD platforms: Azure DevOps, GitHub, GitLab.
• Secrets management: Azure Key Vault, AWS Secrets Manager, HashiCorp Vault.
• Security controls: MFA, RBAC, TDE, Row‑Level Security, Dynamic Data Masking.