DevSecOps Automation Engineer — Secure SDLC

Washington Trust Bank; Spokane (WA); On-site; USD 99,830 - 149,745; Full time

Benefits offered by this job

Health, Retirement, and Work/Life Ben­

Incentive plan eligibility

Job summary

Washington Trust Bank seeks a hands-on DevSecOps – Automations Engineer in Spokane to embed security across the SDLC, automate pipelines, and align with regulatory requirements. You will collaborate with IT and Software Development teams to design security controls, support risk programs, and implement IaC and cloud security practices to enable secure, scalable delivery.

The role emphasizes building automation, tooling, and pipelines while maintaining compliance with FFIEC, NIST, and PCI

Qualifications

• 3–5 years of experience in software development, DevOps, or security engineering.
• Experience integrating security into development workflows and CI/CD pipelines.
• Experience with Infrastructure as Code (IaC) such as Pulumi.
• Understanding of secure software development practices and SDLC.
• Experience with vulnerability management and application security testing.
• Familiarity with cloud security principles, particularly in Microsoft Azure.
• Knowledge of security frameworks and regulatory expectations (FFIEC, NIST, PCI).
• Experience supporting Operational Risk Management (ORM) programs preferred.
• Strong collaboration and communication skills across development, IT, and security teams.
• Automation & Orchestration
• Infrastructure as Code
• Security Tooling: Code scanning and vulnerability assessment tools
• Strong detail orientation with high level of organizational skills and ability to multi‑task, managing interruptions with multiple projects.
• Demonstrated self‑motivation and initiative; ability to work well both independently and with others.
• Ability to prioritize assignments and handle multiple priorities while maintaining a high level of service to clients in a deadline driven environment under the direction of management.
• Excellent interpersonal skills; ability to collaborate with and work effectively with diverse groups of people, managing conflict and negotiating for results when needed.
• Strong verbal and written communication skills, including ability to communicate and collaborate effectively with technical and non‑technical people.
• Preferred experience working in the financial services industry.
• Ability to work additional hours as required by operational and production work loads.

Responsibilities

• Design, implement, and enhance DevSecOps practices that embed security into development, build, and deployment workflows.
• Collaborate with Software Development and IT teams to integrate security controls and validation into CI/CD pipelines and automation processes.
• Develop and maintain automation solutions that reduce manual effort and improve consistency of security controls across systems and applications.
• Support 'shift-left' security practices by incorporating security checks, code scanning, and policy enforcement early in the SDLC.
• Build, enhance, and integrate tools, scripts, and workflows that enable teams to adopt secure coding and deployment practices.
• Partner with development teams to review architecture, design, and code for security considerations and provide guidance on remediation strategies.
• Implement and support Infrastructure-as-Code (IaC) and cloud security practices aligned with secure configuration standards.
• Perform and support vulnerability assessments, code scanning, and remediation tracking in coordination with development and infrastructure teams.
• Translate security findings into actionable guidance for both technical and non‑technical stakeholders.
• Develop and maintain metrics, reporting, and Key Risk Indicators (KRIs) that measure effectiveness of automation and security integration.
• Ensure alignment with regulatory requirements and frameworks (FFIEC, NIST, PCI).
• Support the Bank’s Operational Risk Management (ORM) program, including risk assessments and control validation.
• Participate in incident response and vulnerability remediation efforts.
• Participates in special projects or duties as assigned.
• Performs compliance and risk management duties as required or assigned.
• Regular, reliable attendance is required.

Skills

DevSecOps

CI/CD pipelines

Security engineering

Automation & Orchestration

Cloud security

ORM familiarity

Communication

Multi-tasking

Team collaboration

Problem solving

Tools

Pulumi

Code scanning tools

Vulnerability assessment tools

Job description

Washington Trust Bank seeks a hands-on DevSecOps – Automations Engineer in Spokane to embed security across the SDLC, automate pipelines, and align with regulatory requirements. You will collaborate with IT and Software Development teams to design security controls, support risk programs, and implement IaC and cloud security practices to enable secure, scalable delivery.

The role emphasizes building automation, tooling, and pipelines while maintaining compliance with FFIEC, NIST, and PCI