DevSecOps Engineer

Oklahoma AG; Oklahoma City (OK); On-site; USD 90,000 - 140,000; Full time

Benefits offered by this job

Vacation & sick leave

Holiday pay

Employee benefits

Job summary

Office of Management and Enterprise Services (OMES) in Oklahoma City is seeking a DevSecOps Engineer to automate infrastructure and security within a unified service operations model.

You will own IaC, CI/CD pipelines with policy-as-code, and observability, driving faster, safer releases across the department’s systems.

Qualifications

• 5+ years in DevOps/DevSecOps, SRE, or platform engineering roles.
• Hands-on with IaC and CI/CD tooling.
• Experience embedding security in delivery pipelines (SAST/DAST, secrets mgmt).
• Strong scripting/automation ability (Python, Bash, PowerShell).

Responsibilities

• Design, build, and maintain IaC to replace manual provisioning with repeatable automation.
• Own and evolve CI/CD pipelines with integrated security checks.
• Build and maintain observability across infrastructure and apps to enable proactive reliability.

Skills

IaC

CI/CD automation

Security in pipelines

Observability tooling

Scripting (Python/Bash)

Tools

Terraform

Ansible

GitHub Actions

Jenkins

Azure DevOps

Job description

DevSecOps Engineer# State of Oklahoma Careers## DevSecOps EngineerApply: Oklahoma County: Full time: Posted Yesterday: End Date: November 24, 2026 (12 days left to apply): JR67736**Job Posting Title**DevSecOps Engineer**Agency**090 OFFICE OF MANAGEMENT AND ENTERPRISE SERV**Supervisory Organization**IS-Servers**Job Posting End Date**Refer to the date listed at the top of this posting, if available. Continuous if date is blank.Note: Applications will be accepted until 11:59 PM on the day prior to the posting end date above.**Estimated Appointment End Date (Continuous if Blank)****Full/Part-Time**Full time**Job Type**Regular**Compensation****Job Description****As a DevSecOps Engineer with OMES you will enjoy:*** Generous leave including 15 days of vacation, 15 days of sick leave and 11 paid holidays annually.* A comprehensive Benefit Package with a generous benefit allowance to offset the cost of insurance premiums for employees and their eligible dependents. **Job Details*** Full-time 40-hour work weeks in office.* Support the Information Services Division.* Salary is based on education and experience.* This is an on-site position located in Oklahoma City, OK. **Position Summary**The DevSecOps Engineer drives the automation, security, and delivery practices that power the Service Operations Team's modern, cross-functional way of working. This role owns infrastructure as code, embeds security and observability into every stage of the delivery pipeline, and continuously improves how the team ships, monitors, and operates services. This is a forward-looking, builder-oriented role for someone energized by solving problems with automation rather than process overhead — someone who brings a can-do attitude to ambiguous problems and treats manual toil as something to eliminate, not manage. As the organization shifts from a legacy, tiered support model to a flat service operations structure built on end-to-end ownership, the team needs an engineer who can turn operational lessons into automated, self-service, and observable systems. This role is the technical engine behind that shift — replacing manual, reactive work with repeatable, automated, and continuously improving practices. Beyond technical skill, this role calls for someone with a genuine can-do attitude — comfortable rolling up their sleeves, prototyping a fix rather than waiting for a perfect spec, and treating ambiguity as a starting point rather than a blocker. We're looking for someone who sees automation, security, and observability not as separate disciplines but as one continuous practice of making service operations faster, safer, and more self-sufficient over time. **Key Responsibilities**## Automation Engineering & Infrastructure as Code* Design, build, and maintain infrastructure as code (IaC) using tools such as Terraform, Ansible, or equivalent, replacing manual provisioning and configuration with version-controlled, repeatable automation.* Build self-service tooling and pipelines that let SOT staff provision, deploy, and remediate common issues without engineering intervention.* Continuously identify manual, repetitive operational tasks and automate them, treating toil reduction as an ongoing responsibility rather than a one-time project.## ## Rapid, Secure Delivery* Own and evolve CI/CD pipelines to enable fast, frequent, low-risk releases, embedding security scanning and policy-as-code checks directly into the pipeline rather than as a separate gate.* Partner with development and operations staff to shrink lead time from code commit to production, removing bottlenecks wherever they appear.* Champion a shift-left security mindset, building guardrails that let teams move fast safely rather than relying on after-the-fact review.## ## Observability & Service Operations* Build and maintain observability across infrastructure and applications (metrics, logging, tracing, alerting) so issues are detected and diagnosed before they impact users.* Design dashboards and alerting that give the SOT actionable, real-time signal — not noise — supporting the team's end-to-end ticket ownership model.* Use observability data to drive proactive capacity planning, performance tuning, and reliability improvements.## ## Process Improvement & Ways of Working* Continuously evaluate and modernize Information Services and agency workflows, tooling, and delivery practices, bringing in current industry practices (GitOps, platform engineering, self-service infrastructure) where they add real value.* Lead blameless post-incident reviews focused on systemic, automatable fixes rather than one-off patches.* Mentor and cross-train staff on automation, IaC, and observability practices, spreading modern engineering practices across the team rather than concentrating them in one role.**Physical Demands and Work Environment**This position works in a comfortable office setting with a computer for a large percentage of the workday. The noise level in the work environment is usually mild. Occasional travel may be required.**Minimum Qualifications**Requirements include 5 years of experience in DevOps, DevSecOps, SRE, or platform engineering roles, including:* Hands-on experience with infrastructure as code (Terraform, Ansible, Pulumi, or equivalent) and CI/CD tooling (e.g., GitHub Actions, GitLab CI, Jenkins, Azure DevOps).* Experience embedding security practices (SAST/DAST, secrets management, policy-as-code) directly into delivery pipelines.* Experience building observability with tools such as Prometheus, Grafana, Datadog, Splunk, or equivalent.* Strong scripting/automation ability (Python, Bash, PowerShell, or similar).* A demonstrated bias toward action: comfortable operating with incomplete requirements, proposing a path forward, and iterating in the open.**About** **OMES**The Office of Management and Enterprise Services provides excellent service, expert guidance and continuous improvement in support of our partners’ goals. We are a highly qualified workforce committed to serve those who serve Oklahomans and make government run in the most efficient, innovative manner possible. **OMES is an Equal Opportunity Employer. Reasonable accommodation to individuals with disabilities may be provided upon request.****Equal Opportunity Employment**The State of Oklahoma is an equal opportunity employer and does not discriminate on the basis of genetic information, race, religion, color, sex, age, national origin, or disability.Current active State of Oklahoma employees must apply for open positions internally through the Workday Jobs Hub.If you are needing any extra assistance or have any questions relating to a job you have applied for, please click the link below and find the agency for which you applied for additional information:Agency Contact