Azure DevOps Engineer

Job summary

The Azure DevOps Engineer designs and operates secure cloud delivery and security solutions, applying DevOps, GitOps, and Zero Trust principles across the software development lifecycle. The role builds and secures Azure DevOps CI/CD pipelines, integrates SAST, SCA, DAST, and container scanning, manages vulnerabilities, and implements cloud monitoring, governance, and compliance controls using services such as Azure Sentinel, Azure Policy, and Azure Defender.

Qualifications

• Hands-on experience with Azure Sentinel (SIEM).
• Engineering or architecture experience with on-premises or public cloud technologies, particularly Microsoft Azure.
• Strong knowledge of Azure security services and best practices, including Azure Container Registry, Azure Defender, Azure Policy, and Azure monitoring and alerts.
• Experience with Azure DevOps Repos and Pipelines and securing them.
• Hands-on experience integrating SAST, SCA, and DAST tools into CI/CD pipelines.
• Experience implementing security across the SDLC, including container security.
• Knowledge of vulnerability identification, classification, risk assessment, and remediation.
• Background in infrastructure, network, and application security.
• Understanding of regulatory requirements, risk management, and security controls.
• Ability to design and propose security solutions and architectures.
• Familiarity with Checkov, GitHub Advanced Security, SonarQube, Burp Suite, or similar scanning tools is desirable.

Responsibilities

• Design, build, and maintain secure Azure DevOps CI/CD pipelines for Azure resource deployments.
• Secure Azure DevOps repositories and pipelines, and enforce quality gates and deployment practices.
• Integrate SAST, SCA, DAST, and container security scanning into CI/CD pipelines.
• Identify, classify, assess, and drive remediation of vulnerabilities.
• Identify security gaps across infrastructure, networks, and applications.
• Design security solutions aligned with Zero Trust principles.
• Implement and manage cloud security and monitoring tools, including Azure Monitor, Azure Security Center, Azure Defender, and Azure Sentinel.
• Use Azure Policy and Azure Monitor to support security governance, compliance, and regulatory requirements.

Skills

Relocation