Azure DevSecOps Engineer: Secure CI/CD in Hybrid Cloud

Mechanicode; Maryland; On-site; USD 115,000 - 150,000; Full time

Job summary

Mechanicode in the United States is seeking a mid-level Azure DevSecOps Engineer to build security into every phase of the software delivery lifecycle for federal systems. You will work across Java codebases and Terraform-managed infrastructure to design, build, and troubleshoot secure CI/CD pipelines in a hybrid environment spanning on-prem and multiple clouds.

The role requires 4+ years in DevSecOps/DevOps, hands-on Java and Terraform experience, and the ability to brief senior stakeholders.

Qualifications

• 4+ years in DevSecOps/DevOps/SRE or similar roles.
• Hands-on Java development experience.
• Hands-on Terraform experience provisioning cloud infra.
• Experience building CI/CD pipelines with integrated security scanning.
• Experience in hybrid on-prem plus cloud environments.
• Knowledge of Zero Trust, NIST 800-53, OMB M-21-31 security controls.
• Ability to brief senior stakeholders clearly.
• US citizen or green card holder.

Responsibilities

• Design and configure the DevSecOps toolchain for Java apps.
• Provision and manage on-prem and cloud infrastructure via Terraform.
• Integrate SAST/DAST/SCA into pipelines to detect vulnerabilities early.
• Define automated testing strategy across pipelines.
• Establish test coverage metrics and quality gates.
• Enable teams to create test plans and shift-left testing.
• Maintain traceability across work items, code, tests, and releases.
• Document testing processes and infrastructure.
• Report testing outcomes and security trends to leadership.
• Research new DevSecOps tools and share findings.

Skills

Java development

Terraform

CI/CD pipelines

Security testing

Hybrid environments

Communication

Background check

Education

Bachelors in CS/Engineering or equivalent

Tools

Terraform

Job description

Mechanicode in the United States is seeking a mid-level Azure DevSecOps Engineer to build security into every phase of the software delivery lifecycle for federal systems. You will work across Java codebases and Terraform-managed infrastructure to design, build, and troubleshoot secure CI/CD pipelines in a hybrid environment spanning on-prem and multiple clouds.

The role requires 4+ years in DevSecOps/DevOps, hands-on Java and Terraform experience, and the ability to brief senior stakeholders.