DevSecOps Engineer

Harris Computer; Lansing (MI); On-site; USD 130,000 - 140,000; Full time

Benefits offered by this job

Career growth opportunities

Comprehensive medical, dental, vision

Vacation + personal days

Stock ownership / 401k + matching

Flexible work arrangements

Job summary

STChealth seeks a DevSecOps Engineer to lead security in CI/CD, cloud operations, and automation. You will design secure pipelines, implement SAST/DAST/SCA, and guide teams on secure SDLC and IaC security.

You will mentor colleagues, align engineering, security and operations, and ensure high availability with compliance across cloud environments.

Qualifications

• Bachelor’s degree or relevant experience.
• 7+ years in DevOps/DevSecOps with security focus.
• Experience integrating automated security gates into CI/CD.
• Scripting in Python, Bash, or Go.
• Expertise across AWS/Azure/GCP and cloud security tooling.
• Knowledge of IaC tools and secure SDLC practices.

Responsibilities

• Lead secure CI/CD design and automate security gates (SAST/DAST/SCA).
• Architect and harden scalable, compliant cloud infrastructure.
• Manage containers security and orchestration (Docker/Kubernetes).
• Mentor teams on secure coding and IaC practices.
• Stay current on security standards and threat trends.

Skills

CI/CD pipelines

GitHub Actions

GitLab CI

Jenkins

Python

Bash

Go

Cloud platforms

IaC tooling

Security tooling

Education

Bachelor’s degree in CS or related field

Tools

AWS

Azure

GCP

HashiCorp Vault

IAM / Security Hub

Jira

Job description

As a DevSecOps Engineer, this professional will lead the integration of security into software development, continuous integration, continuous delivery (CI/CD), and cloud operations. They will design and maintain secure CI/CD pipelines, automate security controls ("shifting security left"), manage cloud infrastructure, and ensure system scalability, high availability, and compliance. The DevSecOps Engineer will also mentor team members on secure coding and infrastructure practices, leading cross-functional alignment between engineering, security, and operations teams.

Responsibilities

• Lead the design, implementation, and maintenance of secure CI/CD pipelines, automating security scanning (SAST, DAST, SCA) alongside build, test, and deployment processes.
• Architect, manage, and harden scalable, highly available, and compliant cloud infrastructure.
• Implement and manage container security and orchestration technologies (e.g., Docker, Kubernetes) to optimize deployment and runtime safety.
• Stay up to date with emerging industry trends, security standards, and best practices in DevSecOps, cloud security, and vulnerability management.
• Provide guidance, training, and mentorship to team members on secure development lifecycle (SDLC) practices and Infrastructure as Code (IaC) security.

Requirements

• Bachelor’s degree in Computer Science, Cyber Security, Engineering, related field, or relevant equivalent experience.
• 7+ years of experience in DevOps, DevSecOps, or Infrastructure Engineering with a strong security focus.
• Extensive experience integrating automated security gates into CI/CD pipelines (e.g., GitHub Actions, GitLab CI, Jenkins).
• Expertise in scripting and automation languages (e.g., Python, Bash, Go).
• Expertise with major cloud platforms (AWS, Azure, or GCP) and cloud security tooling (e.g., IAM, Security Hub, GuardDuty).
• In-depth knowledge of infrastructure as code tools.
• Excellent communication, incident handling, and cross-team collaboration skills.

Shift-Left Security Integration

• Implement automated static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), and secrets detection into existing build pipelines to catch vulnerabilities early.

Secrets & Identity Management

• Design, deploy, and manage enterprise secrets management solutions (e.g., HashiCorp Vault, AWS Secrets Manager) and enforce strict Least Privilege Access via IAM policies and Zero Trust architecture.

Vulnerability Management & Remediation

• Establish continuous vulnerability assessment processes across cloud instances, container registries, and software dependencies; collaborate with development teams to triage and patch vulnerabilities based on risk priority.

Security Monitoring & Incident Response Automation

• Partner with Security Operations (SecOps) to build automated threat monitoring, anomaly detection, audit logging, and response capabilities across cloud environments and delivery pipelines.

Benefits - What we offer

• Plenty of opportunities to grow your career
• Comprehensive medical, dental, and vision benefits
• 3 weeks of vacation plus 5 personal days to recharge
• Employee stock ownership, RRSP program, 401k + matching
• A chance to give back through community involvement
• Flexible work arrangements to suit your lifestyle
• Salary Range: $130,000 - 140,000

About us

STChealth, founded in 1988, is dedicated to eradicating vaccine-preventable diseases through innovative technology and service solutions. With over 36 years of experience, the company has developed the first Immunization Information System (IIS) and now supports more than a quarter of all vaccinations reported nationwide. STChealth’s platform securely connects consumers, providers, and public health entities, facilitating real-time data exchange to enhance immunization rates and public health responses.

About Harris

Harris provides mission critical software solutions for the Public Sector, Healthcare, Utilities and Private Sector verticals throughout North America, Europe, Asia and Australia. Working for Harris is the perfect opportunity to fulfill your professional goals as well as achieve your personal dreams! Our employees enjoy a casual work environment that offers comfort while providing superior service to our customers. We offer a comprehensive benefit package as well as other additional “Perks”! We empower our employees to make a difference We have an award-winning culture We offer opportunity to learn We are financially strong and we are owned by the largest software company in Canada (CSI) We have fun! #LI-remote At Harris, we believe great people build great software. We offer an environment where employees are empowered to make a real impact, grow their skills, and shape their careers. Our teams enjoy a supportive, award‑winning culture, a casual and collaborative workplace, and opportunities to learn from a diverse group of businesses and industries. We are financially strong and proudly part of Constellation Software Inc. (CSI), the largest software company in Canada, providing long‑term stability alongside entrepreneurial autonomy. In addition to a competitive compensation and benefits package, we offer meaningful perks, flexibility, and—most importantly—a culture that values people, curiosity, and having fun while doing great work. Follow us on LinkedIn to learn more about our culture, values, and career opportunities.

Harris is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.

Applicants who require a reasonable accommodation due to a disability may contact us by email at [e-mail]. Accommodation requests may be made at any time. This email address is dedicated solely to accommodation requests and cannot be used to inquire about application status.

Know Your Rights Poster EO 13496: Notification of Employee Rights under Federal Labor Laws Our commitment to fair and equitable hiring.

As part of our recruitment process, we use artificial intelligence (AI) tools during the initial screening phase to help identify candidates whose qualifications most closely align with the requirements of the role. This technology supports efficiency and consistency in the early stages, but it never replaces human judgement. All subsequent evaluations and final hiring decisions are made by our recruitment professionals. AI does not make final hiring decisions.