Azure DevSecOps Engineer — Secure Cloud Delivery

Towne; Harmonville (PA); On-site; USD 120,000 - 160,000; Full time

Job summary

Towne Park is seeking a hands-on DevSecOps Engineer to own how software ships and how our cloud infrastructure stays secure—from pipeline to production. You will design and operate Azure CI/CD pipelines, codify infrastructure with Terraform/Bicep, enforce guardrails with Azure Policy, and lead remediation of security findings across environments while partnering with application teams and leadership.

Strong experience with SAST/DAST, IaC best practices, and secure network design will help you

Qualifications

• 5+ years in DevOps/SRE/Platform roles with security ownership.
• Deep Azure experience: App Services / AKS / Functions, Entra ID, Key Vault.
• Proficiency in Azure DevOps: YAML pipelines and artifact management.

Responsibilities

• Design, build, and maintain CI/CD pipelines in Azure DevOps.
• Implement multi-stage release workflows with environment promotion (dev - staging - production).
• Define guardrails using Azure Policy across subscriptions and management groups.
• Automate governance checks with Checkov/tfsec/PSRule and ensure policy-compliant deployments.
• Own vulnerability management: SAST, SCA, container image scanning, DAST; lead remediation.

Skills

Azure DevOps

CI/CD pipelines

Infrastructure as Code

Cloud security

Security monitoring

Education

B.S. in Computer Science

Tools

Terraform

Bicep

Checkov

tfsec

PSRule

Azure Policy

Azure DevOps

Job description

Towne Park is seeking a hands-on DevSecOps Engineer to own how software ships and how our cloud infrastructure stays secure—from pipeline to production. You will design and operate Azure CI/CD pipelines, codify infrastructure with Terraform/Bicep, enforce guardrails with Azure Policy, and lead remediation of security findings across environments while partnering with application teams and leadership.

Strong experience with SAST/DAST, IaC best practices, and secure network design will help you