DevOps Security Engineer ( US Citizen, Ogden, Utah)

Blue Yonder; Ann Arbor (MI); On-site; USD 110,000 - 125,000; Full time

Benefits offered by this job

Comprehensive Medical, Dental and Vision

401(k) with Matching

Flexible Time Off

Corporate Fitness Program

Voluntary benefits (Legal Plans, Accident Insurance, Pet Insurance, etc.)

Job summary

Blue Yonder is actively seeking a DevOps Security Engineer in Ann Arbor, Michigan. The candidate will design and implement security controls within CI/CD pipelines and ensure secure software delivery. The position requires US citizenship with an active clearance and may involve relocations to Ogden, UT, if not local.

Essential qualifications include 3-6 years in DevOps/security engineering, experience with security automation and cloud environments, and strong scripting skills. The role offers a salary range of $110,000 – $125,000 along with comprehensive benefits.

Qualifications

• 3-6 years of experience in DevOps, DevSecOps, or security engineering.
• Experience building and maintaining CI/CD pipelines.
• Familiarity with cloud platforms such as AWS, Azure, or GCP.
• Understanding of secure software development lifecycle (SSDLC) practices.
• Scripting experience (Python, Bash, or similar).

Responsibilities

• Design and implement security controls within CI/CD pipelines.
• Integrate automated security testing tools such as SAST, DAST, and container scanning.
• Work with DevOps teams to secure cloud infrastructure and containers.
• Assist with security audits and vulnerability remediation tracking.

Skills

DevSecOps and secure SDLC

CI/CD automation

Cloud security

Container and Kubernetes security

Vulnerability management

Infrastructure as Code

Security tooling integration

Tools

GitHub Actions

Jenkins

GitLab CI

Docker

Kubernetes

Ansible

Terraform

CloudFormation

Job description

DevOps Security Engineer (US Citizen)

Location: Ogden, UT (100% onsite). Must relocate if not local. US citizens only with active clearance required.

Responsibilities

• Design and implement security controls within CI/CD pipelines to ensure secure software delivery.
• Integrate automated security testing tools such as SAST, DAST, SCA, and container scanning.
• Embed security checks into build and deployment processes to identify vulnerabilities early in the SDLC.
• Work with DevOps teams to secure cloud infrastructure, containers, and Kubernetes environments.
• Implement Infrastructure-as-Code security scanning and policy enforcement.
• Develop automation scripts and integrations to support security workflows.
• Maintain and enhance CI/CD platforms and pipeline security tooling.
• Integrate vulnerability management tools with development workflows.
• Partner with developers and QA teams to promote secure coding practices.
• Assist engineering teams in remediating vulnerabilities identified during testing and scanning.
• Collaborate with internal and customer security teams to implement organizational security standards.
• Support security compliance requirements such as SOC2, FedRAMP, or DoD security standards where applicable.
• Assist with security audits and vulnerability remediation tracking.
• Help maintain documentation of DevSecOps processes and controls.

Required Qualifications

• 3-6 years of experience in DevOps, DevSecOps, or security engineering.
• Experience building and maintaining CI/CD pipelines (GitHub Actions, Jenkins, GitLab CI, or similar).
• Familiarity with cloud platforms such as AWS, Azure, or GCP.
• Experience with container technologies (Docker, Kubernetes).
• Understanding of secure software development lifecycle (SSDLC) practices.
• Experience integrating security tools such as SAST, DAST, SCA, and container vulnerability scanning.
• Scripting experience (Python, Bash, or similar).
• Familiarity with Infrastructure as Code tools (Ansible, Terraform, CloudFormation, etc.).

Preferred Qualifications

• Experience implementing DevSecOps practices in enterprise software environments.
• Knowledge of container and Kubernetes security best practices.
• Experience with secrets management solutions (Vault, AWS Secrets Manager, Azure Key Vault).
• Familiarity with security frameworks such as NIST, CIS Benchmarks, OWASP Top 10.
• Experience supporting government or regulated environments (FedRAMP, DoD Impact Levels, etc.).
• Security certifications such as Security+, CISSP (associate level), Certified Kubernetes Security Specialist (CKS).

Key Skills

• DevSecOps and secure SDLC
• CI/CD automation
• Cloud security
• Container and Kubernetes security
• Vulnerability management
• Infrastructure as Code
• Security tooling integration

Additional Skills

• Must be well versed in working with a diverse group of stakeholders —business analysts, solution architects, technical managers, developers, QA, customer IT.
• Excellent communication (verbal and written) and interpersonal skills.
• Ability to work while embedded in customers' teams remotely.
• High degree of initiative and ownership to take a task and own it from inception to completion.

Salary Range

Estimated base salary range: $110,000 – $125,000. Compensation may vary based on location and experience. Eligible for annual performance bonus or commission program.

Benefits

• Comprehensive Medical, Dental and Vision
• 401(k) with Matching
• Flexible Time Off
• Corporate Fitness Program
• Variety of voluntary benefits (Legal Plans, Accident and Hospital Indemnity, Pet Insurance, etc.)

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.