Senior Azure Devops Engineer

INGEPSY; Medellín; Híbrido; COP 120.000.000 - 240.000.000; Jornada completa

Descripción de la vacante

Growth Acceleration Partners is seeking a Senior Azure DevSecOps Engineer to design, implement, and automate security controls across Azure and CI/CD pipelines. You will embed security into the SDLC, working with DevOps, engineering, and product teams to safeguard cloud infrastructure, applications, and APIs.

The ideal candidate has 7+ years in cloud security with Azure focus, hands-on Azure security experience, and strong automation skills.

Formación

• 7+ years in Cloud/SecDevOps with a strong Microsoft Azure focus.
• Hands-on experience architecting security controls in Azure (AAD/Entra ID, Defender, Key Vault).
• Proven ability to embed automated security checks into CI/CD pipelines (SAST/DAST/IAST).
• Expertise in threat modeling, vulnerability management, container/Kubernetes (AKS) security.
• Proficient scripting (Python/PowerShell/Bash) for automation.

Responsabilidades

• Architect, implement, and maintain enterprise security controls across Azure environments (IAM, network, container security).
• Embed secure SDLC practices into automated CI/CD pipelines with SAST/DAST/IAST and dependency checks.
• Lead threat modeling assessments and design mitigation for microservices, containers, and serverless apps.
• Deploy and manage WAFs, API Gateways, and centralized secrets management.
• Monitor cloud security events using SIEM, CSPM, and CWPP; assist in threat hunting and incident response.
• Develop cloud reference architectures, security policies, and automated compliance guardrails.
• Leverage AI security tools to automate workflows and log analysis; mentor engineers on secure coding.

Conocimientos

Azure Security

DevSecOps

Threat Modeling

CI/CD Pipelines

SAST/DAST/IAST

Python Scripting

Educación

Bachelor’s Degree in CS/IT

Herramientas

Azure DevOps

GitHub Actions

Jenkins

Terraform

Bicep

Descripción del empleo

Founded in 2007, Growth Acceleration Partners (GAP) is a consulting and technology services company. We consult, design, build and modernize revenue-generating software and data engineering solutions for clients. With modernization services and AI tools, we help businesses achieve a competitive advantage through technology. GAP’s remote, integrated engineering teams use end-to-end solutions to innovate and align with your business goals. We have 600+ English-speaking engineers based in Latin America and approximately 20 U.S.-based engineers. With some of the highest customer satisfaction scores in the industry, GAP’s focus is customer and employee success.

GAP is a woman-owned company headquartered in Austin Texas. We are a values-based company focused on growing our people by investing in education, onsite English classes and training in the latest technologies, including AI, data analytics and machine learning. Our goal is to provide solutions for our customers that help them achieve critical business outcomes, while enabling our GAPSters and our communities to attain long-term success.

Summary

We are looking for a Senior Azure DevSecOps Engineer to lead the design, implementation, and automation of security controls across our Microsoft Azure cloud ecosystem and CI/CD pipelines. In this high-impact role, you will embed security into every phase of the Software Development Lifecycle (SDLC), partnering closely with DevOps, engineering, and product teams to safeguard cloud infrastructure, applications, and APIs. You will combine deep cloud security expertise with modern AI-driven security tools, threat modeling, and automated DevSecOps workflows to proactively defend against evolving threats and ensure continuous platform compliance.

Education

Bachelor’s Degree in Computer Science, Cybersecurity, Information Technology, Software Engineering, or a related technical field.

Professional Experience

7+ years of professional experience in Cloud Security, Application Security, DevSecOps, or Information Security with a strong focus on Microsoft Azure

Hands-on experience architecting and managing security controls within Azure (Azure AD / Entra ID, Defender for Cloud, Key Vault, Application Gateways)

Proven track record embedding automated security checks into CI/CD pipelines (Azure DevOps, GitHub Actions, Jenkins) using SAST, DAST, IAST, and dependency scanning

Demonstrated expertise in threat modeling, vulnerability management, penetration testing, and container/Kubernetes (AKS) security

Experience using scripting languages (Python, PowerShell, or Bash) to build security automation and log analysis workflows

Practical experience integrating AI-assisted developer tools (e.g., GitHub Copilot) or AI-powered threat detection and remediation into software delivery practices

Key Responsibilities

Architect, implement, and maintain enterprise security controls across Azure environments, encompassing IAM, network security, container security, and workload protection

Embed secure SDLC practices into automated CI/CD pipelines, integrating SAST/DAST/IAST tools, dependency scanning, and OWASP Top 10 compliance checks

Lead threat modeling assessments, evaluate cloud architecture risks, and design mitigation strategies for microservices, containers, and serverless applications

Deploy and manage Web Application Firewalls (WAF), API Gateways, and centralized secrets management solutions

Monitor cloud security events using SIEM, CSPM, and CWPP platforms, assisting in threat hunting and incident response procedures

Develop and maintain cloud reference architectures, security policies, and automated compliance guardrails

Leverage AI productivity tools and security scripting (Python, PowerShell, Bash) to automate repetitive security workflows, log analysis, and triage

Collaborate cross-functionally with engineering teams to mentor developers on secure coding standards and proactive risk reduction

Required Technical Skills

Strong experience in several of the following areas:

Cloud & Azure Security: Deep technical proficiency with Microsoft Azure, Azure AD / Entra ID, Defender for Cloud, Azure Key Vault, Network Security Groups, and Application Gateways

DevSecOps & CI/CD Pipelines: Experience integrating automated security testing into Azure DevOps, GitHub Actions, or Jenkins pipelines

Application Security & Tooling: Secure SDLC methodologies, OWASP Top 10, SAST/DAST/IAST tools, dependency scanning, and container/Kubernetes (AKS) security

WAF & API Protection: Hands-on experience with Web Application Firewalls (e.g., Cloudflare, F5, Akamai), API Gateways, and secrets management

Scripting & IaC: Proficient in Python, PowerShell, or Bash for automation, alongside Infrastructure as Code (Terraform or Bicep)

AI Security Integration: Familiarity with AI-driven security automation, AI code assistants (GitHub Copilot, Cursor), or AI-powered log analysis tools

Nice to Have

Industry security certifications (e.g., CySA+, Azure Security Engineer Associate AZ-500, CISSP, or CCSP)

Hands-on experience with Cloud Security Posture Management (CSPM) platforms, SIEM tools, serverless security, and ITSM platforms (e.g., ServiceNow)

Exposure to securing AI/ML workloads, vector databases, or LLM API endpoints in Azure cloud environments

Soft Skills

Advanced English proficiency (written and verbal)

Exceptional analytical, diagnostic, and risk-assessment capabilities

Strong consultative and communication skills to influence secure design decisions across engineering and business teams

Proactive mindset with high technical autonomy, accountability, and eagerness to stay ahead of emerging cybersecurity threats

At Growth Acceleration Partners, we're an equal opportunity employer committed to building a diverse and inclusive team. We value everyone's unique background, and we provide equal opportunities regardless of race, color, creed, religion, sexual orientation, gender identity, age, national origin, disability, marital status, veteran status or any other personal right protected by law. We foster a culture of belonging and strive to provide a welcoming environment where everyone feels safe to contribute and grow.