(Senior) DevSecOps Engineer

Job summary

This role designs, builds, integrates, and operates secure, scalable platform capabilities for a central Dev-as-a-Service platform supporting software, data, and AI-enabled application delivery. Responsibilities include creating self-service developer workspaces, Terraform modules and templates, CI/CD pipelines, cloud and container capabilities, security controls, artifact management, and observability on Microsoft Azure, while owning assigned capabilities through support and continuous improvement.

Qualifications

• Strong hands-on experience in DevOps, DevSecOps, Platform Engineering, Site Reliability Engineering, or Cloud Engineering
• Strong practical experience with Microsoft Azure, cloud networking, identity, secrets, and policy controls.
• Demonstrable hands-on experience with Terraform for modular, version-controlled Infrastructure as Code
• Experience with developer workspace technologies such as Coder, or comparable cloud or remote development workspace platforms.
• Experience with CI/CD, containers, Kubernetes, artifact management, and secure software-supply-chain practices.
• Strong scripting or software-engineering skills using Python, PowerShell, Bash, or equivalent
• Experience implementing monitoring, observability, alerting, and operational automation.
• Ability to translate platform designs and requirements into secure, scalable, and supportable technical solutions.
• Ability to troubleshoot complex platform and integration issues
• Ability to collaborate across engineering, architecture, security, and enterprise service teams.
• Experience building and scaling Internal Developer Platforms (IDPs) and Dev-as-a-Service capabilities, including self-service platforms, developer portals, service catalogs, platform APIs, GitOps, policy-as-code, and golden paths is preferred
• Experience integrating enterprise, cloud, commercial, and open-source technologies in large-scale environments, including support for AI/ML workflows and the needs of AI engineers and data scientists is preferred
• You are a hands-on engineer who takes ownership of the quality, security, reliability, and supportability of the capabilities you deliver.
• You are customer focused and turn recurring engineering needs into reusable platform solutions rather than one-off implementations.
• You solve problems pragmatically within enterprise architecture, security, governance, and sourcing boundaries.
• You communicate technical decisions, risks, and trade-offs clearly and collaborate effectively across technical disciplines and organizational boundaries.
• You are curious, committed to continuous learning, and willing to challenge existing approaches constructively.

Responsibilities

• Design, build, integrate, and operate secure platform capabilities on Microsoft Azure.
• Build governed, reproducible, and self-service developer workspaces using technologies such as Coder or comparable platforms
• Develop, test, version, and maintain reusable Terraform modules and platform templates.
• Build and operate CI/CD pipelines for application code, infrastructure, configuration, policy, container images, and deployments.
• Implement cloud networking, identity and access management, workload identities, secrets management, and policy controls.
• Build reusable platform services, automation modules, templates, and golden paths.
• Implement artifact management, container registries, vulnerability controls, and secure software-supply-chain practices.
• Implement monitoring, logging, metrics, tracing, alerting, and operational automation
• Troubleshoot complex issues across workspaces, Azure infrastructure, pipelines, Kubernetes, networking, and integrated services.
• Own assigned platform capabilities throughout their lifecycle, including documentation, support, reliability, and continuous improvement.
• Support platform consumers during onboarding, development, deployment, and production readiness
• Contribute to technical decisions, engineering standards, reviews, and knowledge sharing.

Skills

Degrees

Industry

Relocation