DevSecOps Engineer

State of Oklahoma; Oklahoma; On-site; USD 120,000 - 160,000; Full time

Job summary

State of Oklahoma's OMES is hiring a DevSecOps Engineer to drive automation, security, and delivery practices across the Service Operations Team. You will own infrastructure as code, embed security into the delivery pipeline, and push for self-service, observable systems that reduce manual toil.

You will modernize workflows with GitOps and platform engineering, mentor staff, and partner with development to shrink lead times while maintaining a proactive security mindset.

Qualifications

• 5 years+ in DevOps/DevSecOps, SRE, or platform engineering roles.
• Experience with IaC (Terraform/Ansible/Pulumi) and CI/CD tooling (GitHub Actions, Jenkins, Azure DevOps).
• Security practices in pipelines, SAST/DAST, secrets management, policy-as-code.
• Observability tooling (Prometheus, Grafana, Datadog, Splunk) and scripting (Python, Bash).
• Bias toward action, ability to operate with incomplete requirements and iterate openly.

Responsibilities

• Design, build, and maintain IaC to replace manual provisioning with repeatable automation.
• Own and evolve CI/CD pipelines, embedding security checks into the pipeline.
• Build observability across infra and apps with dashboards and alerts.
• Mentor staff on automation, IaC, and platform engineering practices.
• Lead blameless post-incident reviews and drive continuous improvement.

Skills

Automation mindset

Bias toward action

Collaboration

Problem solving

Education

Bachelor's degree or equivalent in CS/Engineering

Tools

Terraform

Ansible

Pulumi

GitHub Actions

Jenkins

Azure DevOps

Prometheus

Grafana

Datadog

Splunk

Python

Job description

Agency

090 OFFICE OF MANAGEMENT AND ENTERPRISE SERV

Job Posting Title

DevSecOps Engineer

Supervisory Organization

IS-Servers

Job Posting End Date

Refer to the date listed at the top of this posting, if available. Continuous if date is blank.

Note: Applications will be accepted until 11:59 PM on the day prior to the posting end date above.

Full/Part-Time

Full time

Job Type

Regular

Job Description

As a DevSecOps Engineer With OMES You Will Enjoy

• Generous leave including 15 days of vacation, 15 days of sick leave and 11 paid holidays annually.
• A comprehensive Benefit Package with a generous benefit allowance to offset the cost of insurance premiums for employees and their eligible dependents.

Job Details

• Full-time 40-hour work weeks in office.
• Support the Information Services Division.
• Salary is based on education and experience.
• This is an on-site position located in Oklahoma City, OK.

Position Summary

The DevSecOps Engineer drives the automation, security, and delivery practices that power the Service Operations Team's modern, cross-functional way of working. This role owns infrastructure as code, embeds security and observability into every stage of the delivery pipeline, and continuously improves how the team ships, monitors, and operates services. This is a forward-looking, builder-oriented role for someone energized by solving problems with automation rather than process overhead — someone who brings a can-do attitude to ambiguous problems and treats manual toil as something to eliminate, not manage.

As the organization shifts from a legacy, tiered support model to a flat service operations structure built on end-to-end ownership, the team needs an engineer who can turn operational lessons into automated, self-service, and observable systems. This role is the technical engine behind that shift — replacing manual, reactive work with repeatable, automated, and continuously improving practices.

Beyond technical skill, this role calls for someone with a genuine can-do attitude — comfortable rolling up their sleeves, prototyping a fix rather than waiting for a perfect spec, and treating ambiguity as a starting point rather than a blocker. We're looking for someone who sees automation, security, and observability not as separate disciplines but as one continuous practice of making service operations faster, safer, and more self-sufficient over time.

Key Responsibilities

Automation Engineering & Infrastructure as Code

• Design, build, and maintain infrastructure as code (IaC) using tools such as Terraform, Ansible, or equivalent, replacing manual provisioning and configuration with version-controlled, repeatable automation.
• Build self-service tooling and pipelines that let SOT staff provision, deploy, and remediate common issues without engineering intervention.
• Continuously identify manual, repetitive operational tasks and automate them, treating toil reduction as an ongoing responsibility rather than a one-time project.

Rapid, Secure Delivery

• Own and evolve CI/CD pipelines to enable fast, frequent, low-risk releases, embedding security scanning and policy-as-code checks directly into the pipeline rather than as a separate gate.
• Partner with development and operations staff to shrink lead time from code commit to production, removing bottlenecks wherever they appear.
• Champion a shift-left security mindset, building guardrails that let teams move fast safely rather than relying on after-the-fact review.

Observability & Service Operations

• Build and maintain observability across infrastructure and applications (metrics, logging, tracing, alerting) so issues are detected and diagnosed before they impact users.
• Design dashboards and alerting that give the SOT actionable, real-time signal — not noise — supporting the team's end-to-end ticket ownership model.
• Use observability data to drive proactive capacity planning, performance tuning, and reliability improvements.

Process Improvement & Ways of Working

• Continuously evaluate and modernize Information Services and agency workflows, tooling, and delivery practices, bringing in current industry practices (GitOps, platform engineering, self-service infrastructure) where they add real value.
• Lead blameless post-incident reviews focused on systemic, automatable fixes rather than one-off patches.
• Mentor and cross-train staff on automation, IaC, and observability practices, spreading modern engineering practices across the team rather than concentrating them in one role.

Physical Demands and Work Environment

This position works in a comfortable office setting with a computer for a large percentage of the workday. The noise level in the work environment is usually mild. Occasional travel may be required.

Minimum Qualifications

Requirements include 5 years of experience in DevOps, DevSecOps, SRE, or platform engineering roles, including:

• Hands-on experience with infrastructure as code (Terraform, Ansible, Pulumi, or equivalent) and CI/CD tooling (e.g., GitHub Actions, GitLab CI, Jenkins, Azure DevOps).
• Experience embedding security practices (SAST/DAST, secrets management, policy-as-code) directly into delivery pipelines.
• Experience building observability with tools such as Prometheus, Grafana, Datadog, Splunk, or equivalent.
• Strong scripting/automation ability (Python, Bash, PowerShell, or similar).
• A demonstrated bias toward action: comfortable operating with incomplete requirements, proposing a path forward, and iterating in the open.

About OMES

The Office of Management and Enterprise Services provides excellent service, expert guidance and continuous improvement in support of our partners’ goals. We are a highly qualified workforce committed to serve those who serve Oklahomans and make government run in the most efficient, innovative manner possible.

OMES is an Equal Opportunity Employer.

Reasonable accommodation to individuals with disabilities may be provided upon request.

Equal Opportunity Employment

The State of Oklahoma is an equal opportunity employer and does not discriminate on the basis of genetic information, race, religion, color, sex, age, national origin, or disability.

Current active State of Oklahoma employees must apply for open positions internally through the Workday Jobs Hub.