Jobs / KPMG
DevSecOps Engineer
KPMG · Vaughan, ON, Canada
Vaughan, ON, CanadaExp: 2+ yrs74,000-111,000 CAD/yearlyOnsite
Remuneration
May be eligible for bonus awards; comprehensive total rewards program
Location
Vaughan, ON, Canada
Visa sponsorship
Not specified
Job summary
The DevSecOps Engineer supports enterprise platforms and secure software delivery across CI/CD operations, cloud infrastructure, application security, API management, and developer enablement. The role administers Azure DevOps and GitHub Enterprise, supports Azure Kubernetes Service and related Azure resources, develops Terraform automation, and helps integrate security practices such as SAST, DAST, software composition analysis, secrets management, and vulnerability remediation into the software development lifecycle.
Benefits
Bonus awards may be availableComprehensive total rewards program
Qualifications
- At least 2 years of experience in DevOps, DevSecOps, application security, cloud engineering, enterprise platform support, or a related field.
- Strong understanding of the software development lifecycle and secure development practices.
- Hands-on experience with GitHub Actions and Azure DevOps Pipelines for CI/CD automation.
- Experience with Git, source code repositories, and branching strategies.
- Working knowledge of Kubernetes, containerized applications, and cloud-native technologies.
- Experience with Infrastructure as Code concepts and tools such as Terraform.
- Understanding of SAST, DAST, software composition analysis, secrets management, and vulnerability management.
- Familiarity with Azure services, including AKS, Key Vault, API Management, and identity and access management.
- Basic scripting skills in PowerShell, Python, or Bash.
- Strong analytical, troubleshooting, communication, and documentation skills, with a customer-focused approach.
- Ability to collaborate with developers, cybersecurity teams, platform engineers, vendors, and other stakeholders.
- Written and oral fluency in English.
Responsibilities
- Support application security across the secure software development lifecycle, including SAST, DAST, software composition analysis, secrets management, and vulnerability remediation.
- Administer Azure DevOps and GitHub Enterprise repositories, pipelines, access controls, integrations, governance, and release automation.
- Develop and support Terraform-based infrastructure automation, provisioning, configuration, and deployment standardization.
- Support Azure API Management onboarding, configuration, lifecycle management, security policies, governance, and troubleshooting.
- Assist with Azure resources, including AKS, virtual machines, Key Vault, containerized workloads, and identity management.
- Provide technical support for DevSecOps platforms, CI/CD pipelines, development tools, secure practices, and developer onboarding.
- Track software licensing, utilization, renewals, vendor support cases, escalations, and service commitments.
- Monitor platform health, support upgrades, troubleshoot incidents, maintain documentation, and contribute to automation, compliance, and continuous improvement.
Skills
AKSAzureAzure DevOpsAzure Key VaultBashGitGitHubGitHub ActionsIAMKubernetesPowerShellPythonRESTServiceNowTerraformVault
Certifications
Azure, Kubernetes, GitHub, Terraform, or DevOps certifications are an asset
Languages
English
Relocation
No