DevSecOps Engineer

Brooksource; Houston (TX); On-site; USD 120,000 - 160,000; Full time

Job summary

Brooksource is seeking an experienced DevSecOps Engineer to lead modernization of a mission-critical energy sector application. You will design secure CI/CD pipelines, migrate a Windows-installed app to Kubernetes (AKS), and support both legacy and containerized deployment models.

Collaborate with developers and QA to automate releases and enforce security throughout the SDLC. The role emphasizes automation, deployment reliability, and operational excellence in a cloud-native environment with a

Qualifications

• 5+ years of experience in DevOps or DevSecOps roles.
• Experience designing and maintaining CI/CD pipelines.
• Experience containerizing and deploying .NET applications.
• Knowledge of secure software delivery practices and DevSecOps principles.
• Familiarity with SAST, DAST, vulnerability management and secure coding practices.
• Experience with Git and modern source control workflows.
• Proficient with IaC tools such as Terraform, Bicep, or ARM templates.
• Strong troubleshooting and automation skills.

Responsibilities

• Design, build, and maintain secure CI/CD pipelines using Azure DevOps.
• Lead migration of a Windows-installed app to Kubernetes deployment model.
• Support InstallShield and containerized deployments during migration.
• Deploy and manage apps in Kubernetes (AKS preferred).
• Integrate DevSecOps practices across the SDLC (SAST/DAST, vulnerability management).
• Collaborate with developers and QA to implement secure, automated release processes.
• Improve deployment automation, release reliability, and environment consistency.
• Maintain Infrastructure as Code (Terraform, Bicep, ARM).
• Monitor performance, security, and platform health.
• Drive continuous improvement in DevOps tooling and standards.

Skills

DevSecOps experience

Automation

Agile teamwork

Troubleshooting

Tools

Azure DevOps

Kubernetes

Docker

InstallShield

Terraform

Bicep

ARM templates

Git

SAST

DAST

SonarQube/Snyk/Checkmarx

Microsoft Defender for Cloud

Job description

We are seeking an experienced DevSecOps Engineer to join a software engineering team responsible for modernizing a mission-critical application used in the energy industry. This software powers data acquisition systems deployed on drilling rigs and is a key component of customer operations.

The team is replacing a legacy platform that has been in production for 30+ years and migrating the application to a modern cloud-native architecture. This engineer will lead the DevSecOps effort by modernizing deployment processes, building secure CI/CD pipelines, and enabling the application to run within Kubernetes while supporting both legacy and next-generation deployment models.

This is a highly visible role where you will serve as the team's DevSecOps subject matter expert, partnering closely with developers and QA to drive automation, security, and operational excellence.

Key Responsibilities

• Design, build, and maintain secure CI/CD pipelines using Azure DevOps.
• Lead the migration of an existing Windows-installed application to a Kubernetes-based deployment model.
• Support both traditional software installation packages (InstallShield) and modern containerized deployments during the migration.
• Deploy and manage applications within Kubernetes (AKS preferred).
• Integrate DevSecOps best practices throughout the software development lifecycle, including:
• Static Application Security Testing (SAST)
• Dynamic Application Security Testing (DAST)
• Dependency and vulnerability scanning
• Secrets management
• Collaborate with software developers and QA engineers to implement secure, automated release processes.
• Improve deployment automation, release reliability, and environment consistency.
• Maintain and enhance Infrastructure as Code (Terraform, Bicep, ARM, or similar).
• Monitor application performance, security, and platform health.
• Drive continuous improvements in DevOps processes, tooling, and operational standards.

Required Qualifications

• 5+ years of experience in DevOps, DevSecOps, or Cloud Engineering.
• Strong experience designing and maintaining CI/CD pipelines using Azure DevOps.
• Experience containerizing and deploying .NET applications.
• Knowledge of secure software delivery practices and DevSecOps principles.
• Familiarity with SAST, DAST, vulnerability management, and secure coding practices.
• Experience with Git and modern source control workflows.
• Experience with Infrastructure as Code tools such as Terraform, Bicep, or ARM templates.
• Strong troubleshooting and automation skills.

Preferred Qualifications

• Experience supporting legacy Windows application deployments and modernization initiatives.
• Knowledge of InstallShield or similar installer technologies.
• Experience with Docker and container image management.
• Experience with security tools such as SonarQube, Snyk, Checkmarx, or Microsoft Defender for Cloud.
• Familiarity with Azure monitoring and observability tools.
• Experience working within Agile development teams.

Technical Environment

• Docker
• C# / .NET
• Terraform / Bicep / ARM
• Git
• InstallShield
• SAST / DAST Security Tools

What We're Looking For

We're looking for someone who can step in as the DevSecOps leader for the team. You'll be the primary DevSecOps engineer supporting a collaborative group of developers and QA engineers, taking ownership of deployment automation, Kubernetes, CI/CD, and security initiatives.

Success in this role requires someone who enjoys solving complex modernization challenges, works well across teams, and is comfortable owning DevSecOps strategy from design through implementation.

Soft Skills

• Excellent collaboration and communication skills.
• Strong analytical and problem-solving abilities.
• Self-driven with a proactive approach to automation and continuous improvement.
• Team-oriented mindset with the ability to work cross-functionally.

EEO Statement:

Brooksource is an equal opportunity employer that does not discriminate on the basis of actual or perceived race, color, creed, religion, national origin, ancestry, citizenship status, age, sex or gender (including pregnancy, childbirth, lactation and related medical conditions), gender identity or gender expression, sexual orientation, marital status, military service and veteran status, physical or mental disability, protected medical condition as defined by applicable state or local law, genetic information, or any other characteristic protected by applicable federal, state, or local laws and ordinances.

Benefits & Perks: Brooksource offers competitive medical, dental, vision, Health Savings Account, Dependent Care FSA, and supplemental coverage with plans that can fit each employee’s needs. We offer a 401k plan that includes a company match and is fully vested after you become eligible, paid time off, sick time, and paid company holidays. We also offer an Employee Assistance Program (EAP) that provides services like virtual counseling, financial services, legal services, life coaching, etc.

Pay Disclaimer

The pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.