DevSecOps Engineer

Tek Leaders Inc; Austin (TX); On-site; USD 120,000 - 170,000; Full time

Job summary

Tek Leaders Inc. seeks a DevSecOps Engineer to join a hands-on team in Austin, TX. The role focuses on securing and accelerating software delivery through Veracode, SonarQube, GitLab, and Jira administration, plus automated CI/CD pipelines.

You will collaborate with developers, security, and operations to embed security into the SDLC, streamline workflows, and improve deployment velocity while maintaining governance and standards.

Qualifications

• 3+ years in DevSecOps practices and best practices in SDLC.
• 3+ years building and automating CI/CD pipelines.
• 3+ years managing source control/repositories.
• 3+ years using application security testing tools.
• 3+ years scripting and automation skills.
• 2+ years AWS and/or Azure cloud environments with IaC and CI/CD integrations.

Responsibilities

• Administer Veracode platform, onboard teams, and configure SAST/DAST/SCA.
• Onboard teams to SonarQube and integrate into CI/CD pipelines.
• Manage GitLab Self-Managed environments, projects, runners, and security.
• Design and optimize CI/CD pipelines and automation frameworks.
• Administer Jira projects, workflows, dashboards, and automation.
• Drive DevSecOps best practices to improve reliability and velocity.

Skills

DevSecOps methodologies

CI/CD automation

Scripting

Security best practices

Vulnerability remediation

Cloud infrastructure

Tools

Veracode

SonarQube

GitLab

Jira

IaC tooling

Job description

DevSecOps Engineer role

Candidates must be local the state of Texas to be submitted.

The role does require 4-5 days per week on-site in Austin, TX

• The interview process will be 1 technical interview and then an offer will be made.
• Please let me know if there are any questions.

Job Description:

• The DevSecOps Engineer will support the administration, implementation, maintenance, and adoption of enterprise software development, security, and delivery platforms.
• This role will serve as a technical subject matter expert responsible for integrating security, automation, and operational best practices into the software development lifecycle (SDLC).
• The engineer will collaborate with development teams, infrastructure teams, cybersecurity personnel, and business stakeholders to improve software quality, security posture, and delivery efficiency.

Primary Responsibilities

Veracode Administration and Onboarding

• Administer and maintain the Veracode platform, including user provisioning, role management, policy configuration, and system governance.
• Support onboarding of application teams to Veracode security scanning capabilities.
• Configure and support SAST, DAST, SCA, container, and other application security scanning services.
• Assist development teams with vulnerability remediation activities and security best practices.
• Develop documentation, standards, training materials, and operational procedures.

SonarQube Administration and Onboarding

• Administer and maintain SonarQube environments, projects, quality profiles, quality gates, and user access controls.
• Onboard application teams and integrate SonarQube into CI/CD pipelines.
• Support code quality initiatives and assist teams with remediation of technical debt and code quality issues.
• Establish and maintain enterprise coding standards and reporting metrics.

GitLab Administration and Maintenance

• Administer and maintain GitLab Self-Managed environments.
• Configure projects, groups, repositories, runners, permissions, integrations, and security settings.
• Perform platform upgrades, maintenance, monitoring, troubleshooting, and capacity management.
• Support source code migration and repository onboarding activities.
• Maintain operational procedures, standards, and platform documentation.

CI/CD Pipeline Development and Automation

• Design, build, maintain, and optimize CI/CD pipelines using GitLab.
• Develop reusable pipeline templates and automation frameworks.
• Integrate security testing, code quality validation, compliance controls, and deployment automation into software delivery workflows.
• Support Infrastructure-as-Code (IaC), automated testing, release management, and deployment processes.
• Implement DevSecOps best practices to improve reliability, consistency, and delivery velocity.

Atlassian Jira Administration

• Administer Jira projects, workflows, permissions, issue types, dashboards, reports, and automation rules.
• Support project teams with onboarding, configuration, and governance activities.
• Configure integrations between Jira and software development platforms including GitLab and other enterprise tools.
• Develop reporting and dashboards to improve project visibility and operational metrics.

Expected Outcomes

• Successful onboarding and support of application teams to enterprise DevSecOps platforms.
• Increased adoption of automated security and quality controls across the SDLC.
• Improved software delivery efficiency and standardization.
• Reduction in security vulnerabilities and technical debt.
• Enhanced operational stability, compliance posture, and software development maturity.

Minimum Yrs of Experience, Skills, and Qualifications

• 3 years of DevSecOps methodologies and best practices
• 3 years of CI/CD pipeline development and automation
• 3 years of Source code management and repository administration
• 3 years of Application security testing tools and practices
• 3 years of Scripting and automation
• 2 years of Experience administering and supporting AWS and/or Azure cloud environments, including cloud infrastructure, security, networking, automation, Infrastructure as Code (IaC), container platforms, and CI/CD integrations.

Preferred Skills and Qualifications

• 2 years of Experience administering code suggestion and AI-assisted development platforms
• 2 years of Experience planning and execution migrations involving source code repositories, CI/CD platforms or DevSecOps toolchains
• 2 years of Experience supporting application modernization, cloud migration, and DevSecOps tool integrations within cloud-hosted environments is highly desired
• N/A Cloud certifications