DevSecOps - Automations Engineer

Washington Trust Bank; Spokane (WA); On-site; USD 99,830 - 149,745; Full time

Benefits offered by this job

Health, Retirement, and Work/Life Ben­

Incentive plan eligibility

Job summary

Washington Trust Bank seeks a hands-on DevSecOps – Automations Engineer in Spokane to embed security across the SDLC, automate pipelines, and align with regulatory requirements. You will collaborate with IT and Software Development teams to design security controls, support risk programs, and implement IaC and cloud security practices to enable secure, scalable delivery.

The role emphasizes building automation, tooling, and pipelines while maintaining compliance with FFIEC, NIST, and PCI

Qualifications

• 3–5 years of experience in software development, DevOps, or security engineering.
• Experience integrating security into development workflows and CI/CD pipelines.
• Experience with Infrastructure as Code (IaC) such as Pulumi.
• Understanding of secure software development practices and SDLC.
• Experience with vulnerability management and application security testing.
• Familiarity with cloud security principles, particularly in Microsoft Azure.
• Knowledge of security frameworks and regulatory expectations (FFIEC, NIST, PCI).
• Experience supporting Operational Risk Management (ORM) programs preferred.
• Strong collaboration and communication skills across development, IT, and security teams.
• Automation & Orchestration
• Infrastructure as Code
• Security Tooling: Code scanning and vulnerability assessment tools
• Strong detail orientation with high level of organizational skills and ability to multi‑task, managing interruptions with multiple projects.
• Demonstrated self‑motivation and initiative; ability to work well both independently and with others.
• Ability to prioritize assignments and handle multiple priorities while maintaining a high level of service to clients in a deadline driven environment under the direction of management.
• Excellent interpersonal skills; ability to collaborate with and work effectively with diverse groups of people, managing conflict and negotiating for results when needed.
• Strong verbal and written communication skills, including ability to communicate and collaborate effectively with technical and non‑technical people.
• Preferred experience working in the financial services industry.
• Ability to work additional hours as required by operational and production work loads.

Responsibilities

• Design, implement, and enhance DevSecOps practices that embed security into development, build, and deployment workflows.
• Collaborate with Software Development and IT teams to integrate security controls and validation into CI/CD pipelines and automation processes.
• Develop and maintain automation solutions that reduce manual effort and improve consistency of security controls across systems and applications.
• Support 'shift-left' security practices by incorporating security checks, code scanning, and policy enforcement early in the SDLC.
• Build, enhance, and integrate tools, scripts, and workflows that enable teams to adopt secure coding and deployment practices.
• Partner with development teams to review architecture, design, and code for security considerations and provide guidance on remediation strategies.
• Implement and support Infrastructure-as-Code (IaC) and cloud security practices aligned with secure configuration standards.
• Perform and support vulnerability assessments, code scanning, and remediation tracking in coordination with development and infrastructure teams.
• Translate security findings into actionable guidance for both technical and non‑technical stakeholders.
• Develop and maintain metrics, reporting, and Key Risk Indicators (KRIs) that measure effectiveness of automation and security integration.
• Ensure alignment with regulatory requirements and frameworks (FFIEC, NIST, PCI).
• Support the Bank’s Operational Risk Management (ORM) program, including risk assessments and control validation.
• Participate in incident response and vulnerability remediation efforts.
• Participates in special projects or duties as assigned.
• Performs compliance and risk management duties as required or assigned.
• Regular, reliable attendance is required.

Skills

DevSecOps

CI/CD pipelines

Security engineering

Automation & Orchestration

Cloud security

ORM familiarity

Communication

Multi-tasking

Team collaboration

Problem solving

Tools

Pulumi

Code scanning tools

Vulnerability assessment tools

Job description

Ctr on Post Fl 3
176 S Post St
Spokane, WA 99201, USA

Description

OVERVIEW

The DevSecOps – Automations Engineer is a hands‑on engineering role within the Information Security Office responsible for integrating security into software development, deployment processes, and automation workflows across the bank. This role works in close partnership with Information Technology and Software Development teams to embed security controls and practices throughout the software development lifecycle (SDLC), supporting secure‑by‑design principles while enabling efficient delivery.

The engineer focuses on building and enhancing automation, tooling, and pipeline integrations that incorporate security into development and operational processes, while ensuring alignment with regulatory requirements and the Bank’s Operational Risk Management (ORM) program. This position operates at the intersection of security, engineering, and operations—guiding and enabling teams to adopt scalable, automated, and compliant security practices without impeding delivery.

ESSENTIAL FUNCTIONS

• Design, implement, and enhance DevSecOps practices that embed security into development, build, and deployment workflows.
• Collaborate with Software Development and IT teams to integrate security controls and validation into CI/CD pipelines and automation processes.
• Develop and maintain automation solutions that reduce manual effort and improve consistency of security controls across systems and applications.
• Support 'shift-left' security practices by incorporating security checks, code scanning, and policy enforcement early in the SDLC.
• Build, enhance, and integrate tools, scripts, and workflows that enable teams to adopt secure coding and deployment practices.
• Partner with development teams to review architecture, design, and code for security considerations and provide guidance on remediation strategies.
• Implement and support Infrastructure-as-Code (IaC) and cloud security practices aligned with secure configuration standards.
• Perform and support vulnerability assessments, code scanning, and remediation tracking in coordination with development and infrastructure teams.
• Translate security findings into actionable guidance for both technical and non‑technical stakeholders.
• Develop and maintain metrics, reporting, and Key Risk Indicators (KRIs) that measure effectiveness of automation and security integration.
• Ensure alignment with regulatory requirements and frameworks (FFIEC, NIST, PCI).
• Support the Bank’s Operational Risk Management (ORM) program, including risk assessments and control validation.
• Participate in incident response and vulnerability remediation efforts.
• Participates in special projects or duties as assigned.
• Performs compliance and risk management duties as required or assigned.
• Regular, reliable attendance is required.

KNOWLEDGE/SKILLS/EXPERIENCE

• 3–5 years of experience in software development, DevOps, or security engineering.
• Experience integrating security into development workflows and CI/CD pipelines.
• Experience with Infrastructure as Code (IaC) such as Pulumi.
• Understanding of secure software development practices and SDLC.
• Experience with vulnerability management and application security testing.
• Familiarity with cloud security principles, particularly in Microsoft Azure.
• Knowledge of security frameworks and regulatory expectations (FFIEC, NIST, PCI).
• Experience supporting Operational Risk Management (ORM) programs preferred.
• Strong collaboration and communication skills across development, IT, and security teams.
• Automation & Orchestration
• Infrastructure as Code
• Security Tooling: Code scanning and vulnerability assessment tools
• Strong detail orientation with high level of organizational skills and ability to multi‑task, managing interruptions with multiple projects.
• Demonstrated self‑motivation and initiative; ability to work well both independently and with others.
• Ability to prioritize assignments and handle multiple priorities while maintaining a high level of service to clients in a deadline driven environment under the direction of management.
• Excellent interpersonal skills; ability to collaborate with and work effectively with diverse groups of people, managing conflict and negotiating for results when needed.
• Strong verbal and written communication skills, including ability to communicate and collaborate effectively with technical and non‑technical people.
• Preferred experience working in the financial services industry.
• Ability to work additional hours as required by operational and production work loads.

Compensation: $99,830 - $149,745

The compensation range represents the low and high end of the base compensation range for this position located in Spokane, WA. Actual compensation will vary and may be above or below the range based on various factors including but not limited to location, experience, and performance. This position is eligible to participate in an applicable incentive plan.

What Our Culture Can Offer You

Our benefit philosophy is to provide you with a comprehensive package to secure your overall wellness and help you become and remain a fulfilled and productive employee. Our benefits include Health, Financial, Retirement and Work/Life Benefits. We are proud to share an overview of our benefitsHERE as part of your total compensation.

Washington Trust Bank celebrates diversity in the workplace and actively recruits talent to help reflect the unique communities where we live and work. We are proud to be an equal opportunity employer and prohibit discrimination or harassment based on race, religion, sex, gender identity, sexual orientation, national origin, age, pregnancy, disability, genetic information and any other protected characteristics outline by state, federal and local laws. We believe strength comes from the diverse backgrounds and experiences of our team, and we are dedicated to fostering a supportive and inclusive work environment.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.