Development, Security, and Operations Engineer

Fenwick & West; San Francisco (CA); Hybrid; USD 126,000 - 189,000; Full time

Benefits offered by this job

Healthcare

Life Insurance

Health Savings Accounts

Flexible Spending Accounts

Wellbeing

Job summary

Fenwick & West seeks a DevSecOps Engineer to support citizen development initiatives, turning experiments into secure, production-ready applications. You will bridge business innovation with enterprise standards, enforcing SDLC, security, and operational practices while offloading routine work from senior engineers. The role is full-time, exempt, and flexible across U.S.

offices and some remote locations. Expect collaboration with security teams and ongoing improvement of golden paths and

Qualifications

• Proficiency with Git-based source control and collaborative workflows.
• Hands-on experience with Azure DevOps (Repos, Pipelines, Boards).
• Knowledge of Azure services (App Services, Functions, Container Apps).
• Knowledge of application security fundamentals: secrets management, dependency risk, secure configuration.
• Ability to review Python and/or JavaScript code.
• Experience implementing and operating CI/CD pipelines.
• Experience with citizen development or low-code platforms preferred.
• Familiarity with Terraform, Bicep, or similar IaC tools.
• Experience with Docker containerization.
• Exposure to Defender, Snyk, or equivalent security tooling.

Responsibilities

• Partner with citizen developers to refactor, harden, and productionize apps built with Python/JS and low-code platforms.
• Guide developers on repo structure, branching, PRs, and versioning.
• Translate loosely defined solutions into maintainable codebases.
• Enforce SDLC best practices: source control, CI/CD pipelines, environment separation.
• Create reusable DevSecOps golden paths and deployment templates.
• Perform code reviews focusing on security, resilience, and maintainability.
• Integrate automated security tooling (SAST, dependency scanning, secrets).
• Collaborate with security teams to meet enterprise requirements with minimal friction.
• Support deployments through controlled CI/CD pipelines; reduce ad-hoc releases.
• Troubleshoot pipeline failures, deployment issues, and environment-specific bugs.
• Assist with incident response for citizen-developed apps in production.
• Remediate security findings and technical debt post-deployment.
• Document patterns and fixes to reduce repeated friction.
• Perform other related duties as assigned.

Skills

Git-based source control

Azure DevOps

Azure cloud services

Application security fundamentals

Python/JavaScript code review

CI/CD pipelines

Low-code citizen development

Infrastructure as Code (Terraform/Bice

Docker

Security tooling (Defender/Snyk)

Communication & troubleshooting

Education

Bachelor's degree in Computer Science or related field

Tools

Git

Azure DevOps (Repos, Pipelines, Boards)

Docker

Terraform

Bicep

Snyk

Job description

Job Description Summary

We are seeking a Development, Security, and Operations "DevSecOps" Engineer to support and scale the organization’s citizen development initiatives. This role works closely with non-traditional developers — analysts, business users, and rapid prototypers — to transition experimental or prototype applications into secure, supportable, and production-ready solutions.

We are seeking a Development, Security, and Operations "DevSecOps" Engineer to support and scale the organization’s citizen development initiatives. This role works closely with non-traditional developers — analysts, business users, and rapid prototypers — to transition experimental or prototype applications into secure, supportable, and production-ready solutions.

The DevSecOps Engineer acts as the connective tissue between business-driven innovation and enterprise engineering standards — emphasizing enablement over gatekeeping, while enforcing sound software development lifecycle, security, and operational practices. This position is designed to offload and formalize a significant portion of the day-to-day operational work currently performed by senior engineers, allowing them to focus on higher-order architecture, platform design, and governance.

This position is a full-time exempt role and can be based in any of our U.S. office locations and some remote locations.

Job Description

• Partner directly with citizen developers to refactor, harden, and productionize applications built with Python, JavaScript, and low-code/automation platforms.
• Guide developers on repository structure, branching strategies, pull requests, and versioning.
• Translate loosely defined or experimental solutions into maintainable, supportable codebases.
• Establish, document, and enforce SDLC best practices including source control standards, CI/CD pipelines for build, test, and deployment, and environment separation (development, UAT, production).
• Create and maintain reusable DevSecOps “golden paths” including standardized pipeline templates, deployment frameworks, and secure configuration and secrets management patterns.
• Perform code reviews with emphasis on security vulnerabilities, error handling, resilience, and maintainability.
• Integrate and operate automated security tooling: SAST, dependency/vulnerability scanning, and secrets detection.
• Work closely with security teams to ensure applications meet enterprise requirements without unnecessary friction.
• Support deployments through controlled CI/CD pipelines, eliminating manual or ad-hoc release processes.
• Troubleshoot pipeline failures, deployment issues, configuration problems, and environment-specific bugs.
• Assist with incident response for citizen-developed applications running in production.
• Help remediate security findings and technical debt discovered post-deployment.
• Document patterns, standards, and common fixes to reduce repeated friction.
• Perform other related duties as assigned.

Desired Skills And Qualifications

• Advanced proficiency with Git-based source control and collaborative workflows.
• Advanced hands-on experience with Azure DevOps (Repos, Pipelines, Boards).
• Intermediate familiarity with Microsoft Azure services (App Services, Functions, Container Apps, or similar).
• Intermediate knowledge of application security fundamentals: secrets management, dependency risk, and secure configuration.
• Intermediate ability to review and reason about Python and/or JavaScript code.
• Advanced analytical, troubleshooting, and communication skills.
• Structured thinking; comfortable bringing order to unstructured or rapidly developed codebases.
• Enablement mindset with a bias toward pragmatic solutions; meets developers where they are.
• Demonstrated experience implementing and operating CI/CD pipelines.
• Experience supporting citizen development or low-code platforms preferred.
• Familiarity with Infrastructure as Code tools (Terraform, Bicep, or similar) preferred.
• Experience with containerization technologies (Docker) preferred.
• Exposure to security tooling such as Microsoft Defender, Snyk, or equivalent preferred.

Reporting to the Senior Solutions ＆ Automation Manager, the ideal candidate will have 3+ years of experience in DevOps, DevSecOps, or related engineering roles. A Bachelor's Degree in Computer Science or a related field is preferred.

Benefits And Compensation Details

At Fenwick, we believe that our partners and employees are our most important asset. Helping you and your families achieve and maintain good health - physical, emotional, and financial - is the reason we offer a comprehensive benefit program. We provide benefits to eligible employees under plans such as Healthcare, Life Insurance, Health Savings Accounts, Flexible Spending Accounts, and Wellbeing. Except as otherwise required by law, temporary employees are generally not entitled to these benefits.

The Anticipated Range For This Position Is

$126,000 - $189,000

Depending on the role, the actual base salary offered may depend upon a variety of factors, including without limitation, the qualifications of the individual applicant for the position, years of relevant experience, level of education attained, certifications or other professional licenses held, and if applicable, the location in which the applicant lives and/or from which they will be performing the job.

A discretionary bonus for eligible employees may also be available based on performance. Additional information about employee eligibility for benefits and discretionary bonus will be made available upon request.