Azure DevSecOps Engineer: Secure CI/CD & IaC

Towne; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

Towne Park is seeking a seasoned DevSecOps professional to own cloud security, CI/CD, and IaC across our Azure environment. You will design end-to-end pipelines, enforce security policies, and drive remediation with engineering teams.

Bring 5+ years in DevOps with security ownership, strong Azure expertise, and hands-on experience with Terraform/Bicep. This role emphasizes collaboration with cross-functional teams to protect cloud resources.

Qualifications

• B.S. in Computer Science or equivalent.
• 5+ years in DevOps/SRE with hands-on security ownership (DevSecOps, AppSec, or CloudSec).
• Strong experience with Azure services and IaC.
• Proven ability to implement security controls and governance in cloud environments.

Responsibilities

• Design, build, and maintain CI/CD pipelines in Azure DevOps (YAML) for app and infra deployments.
• Implement multi-stage release workflows with environment promotion and automated rollback.
• Establish branch policies, PR validation builds, and quality gates.
• Own deployment reliability: zero-downtime deployment patterns and metrics.
• Define and enforce guardrails using Azure Policy across subscriptions and management groups.
• Lead vulnerability management and remediation end-to-end, including SBOMs and reporting.
• Develop secure coding guidance and reusable security patterns, integrating security into dev workflows.

Skills

Azure

Azure DevOps

Terraform/Bicep

PowerShell

Python

Security ownership

Communication

Education

B.S. in Computer Science

Tools

Azure Policy

Checkov

Defender for Cloud

Job description

Towne Park is seeking a seasoned DevSecOps professional to own cloud security, CI/CD, and IaC across our Azure environment. You will design end-to-end pipelines, enforce security policies, and drive remediation with engineering teams.

Bring 5+ years in DevOps with security ownership, strong Azure expertise, and hands-on experience with Terraform/Bicep. This role emphasizes collaboration with cross-functional teams to protect cloud resources.