DevSecOps Engineer

Quiet Capital; United States; On-site; USD 96,000 - 130,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

401(k) match

Job summary

Paylocity, a leading cloud-based HR and payroll provider, is hiring a DevSecOps Engineer. You will guide internal teams on secure software practices and maintain security tooling, while integrating security into the CI/CD pipeline and advocating architecture improvements.

Ideal candidates have 3+ years in full-stack web development, strong Python skills, and familiarity with SSO, security tooling, and cloud-based security. Remote role with US-wide eligibility and competitive benefits.

Qualifications

• Bachelor's degree in InfoSec, Computer Science, Engineering, or related field, or equivalent practical experience.
• Minimum 3 years’ experience with full-stack web development.
• Experience developing and working with Web APIs.
• Experience with scaling secure-by-design security solutions for developers.
• Experience interpreting results from Static Code Scanning tools and third party dependency scanning tools
• Strong knowledge of Security Token Services, Federated Identity Providers, SAML 2.0, claims-based security and other SSO technologies.
• Experience in remediating security vulnerabilities beyond OWASP Top 10.
• Experience in assessing security of native and hybrid mobile applications beyond the use of automated tools.
• Strong experience developing in Python.
• Experience developing in .NET is a plus.
• Functional knowledge of container-based application infrastructure with Docker is a plus.
• Experience working with Payroll, HR, Time & Labor Management, and Online Benefits Enrollment applications is a plus.
• Experience with Privileged Access Management and/or Secrets Management is a plus.

Responsibilities

• Develop and maintain internal application security tooling.
• Integrate security into the build/deployment process.
• Promote a proactive approach to addressing the changing threat landscape by recommending and implementing architectural improvements to security infrastructure.
• Provide expert guidance and recommendations for strategic and tactical security architecture topics through risk advisory services.
• Assist developers in remediating vulnerabilities by providing line-by-line guidance.
• Provide training and education to developers on software security best practices in various cloud-based systems.

Skills

Full-stack web development

Web APIs

Security architecture

Python development

SSO technologies (SAML, tokens)

Education

Bachelor's degree in InfoSec, CS, Eng, or related field

Equivalent practical experience

Tools

Docker

Static/Dynamic code analysis tools

Identity/SSO tooling

Cloud security tooling

Job description

Job Type

Full-time

Description

Paylocity is an award-winning provider of cloud-based HR and payroll software solutions, offering the most complete platform for the modern workforce. The company has become one of the fastest-growing HCM software providers worldwide by offering an intuitive, easy-to-use product suite that helps businesses automate and streamline HR and payroll processes, attract and retain talent, and build a strong workplace culture.

While traditional HR and payroll providers automate basic HR processes such as payroll and benefits administration, Paylocity goes further by developing tools that HR and businesses need to compete for talent and deliver against the expectations of the modern workforce.

We give our employees what they need to succeed, including great benefits and perks! We offer medical, dental, vision, life, disability, and a 401(k) match, as well as perks that support you, your family, and your finances. And if it's career development you desire, we provide that, too! At Paylocity, people matter most and have always been at the heart of our business.

When you feel like you belong, work is no longer work – it's personal. At Paylocity, we believe better employees lead to better companies. Workplaces and cultures that care will build the future, and at Paylocity, we're doing just that. Join us as we change the future and transform your career!

There are jobs and then there are careers. Since 1997, Paylocity has been hiring talented people, giving them big challenges, and providing the right resources to help them succeed. Our award-winning culture ensures all employees feel truly welcome, appreciated, and free to be themselves. While other companies talk about it, we make it happen. Join Paylocity and launch your career!

This is a fully remote position, allowing you to work from home or location of record within the U.S. with no in-office requirements. You must be available five days per week during designated work hours. The work arrangement for this role is subject to change based on business needs and individual performance. This may include adjustments to on-site requirements or schedule expectations, as necessary.

Position Overview

The DevSecOps Engineer is responsible for understanding and providing guidance to internal teams on best practices in software security and architecture for Paylocity's Information Systems. Responsibilities will also include development and maintenance of internal application security tools and performing static and dynamic analysis of our web and mobile applications.

Primary Responsibilities

The below represents the primary duties of the position, others may be assigned as needed. To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Develop and maintain internal application security tooling.
• Integrate security into the build/deployment process.
• Promote a proactive approach to addressing the changing threat landscape by recommending and implementing architectural improvements to security infrastructure.
• Provide expert guidance and recommendations for strategic and tactical security architecture topics through risk advisory services.
• Assist developers in remediating vulnerabilities by providing line-by-line guidance.
• Provide training and education to developers on software security best practices in various cloud-based systems.

Education And Experience

• Bachelor's degree in InfoSec, Computer Science, Engineering, or a related field, or equivalent practical experience.
• Minimum 3 years’ experience with full-stack web development.
• Experience developing and working with Web APIs.
• Experience with scaling secure-by-design security solutions for developers.
• Experience interpreting results from Static Code Scanning tools and third party dependency scanning tools
• Strong knowledge of Security Token Services, Federated Identity Providers, SAML 2.0, claims-based security and other SSO technologies.
• Experience in remediating security vulnerabilities beyond OWASP Top 10.
• Experience in assessing security of native and hybrid mobile applications beyond the use of automated tools.
• Strong experience developing in Python.
• Experience developing in .NET is a plus.
• Functional knowledge of container-based application infrastructure with Docker is a plus.
• Experience working with Payroll, HR, Time & Labor Management, and Online Benefits Enrollment applications is a plus.
• Experience with Privileged Access Management and/or Secrets Management is a plus.

Physical Requirements

• Ability to sit for extended periods: The role requires sitting at a desk or workstation for long periods, typically 7-8 hours a day.
• Use of computer and phone systems: The employee must be able to operate a computer, use phone systems, and type. This includes using multiple software programs and inquiries simultaneously.

Paylocity is an equal-opportunity employer. Paylocity is committed to the full inclusion of all individuals. We recruit, train, compensate, and promote regardless of race, religion, color, national origin, sex, disability, age, veteran status, and other protected status as required by applicable law. At Paylocity, we believe diversity makes us better.

We embrace and encourage our employees’ differences in age, culture, ethnicity, family or marital status, gender identity or expression, language, national origin, physical and mental ability, political affiliation, race, religion or spiritual belief, sexual orientation, socio-economic status, veteran status, and other characteristics that make our employees unique. We actively cultivate these differences through our employee resource groups (ERGs), employee experiences, perspectives, talents, and approaches to drive innovation in the software and services we provide our customers.

We comply with federal and state disability laws and make reasonable accommodations for applicants and employees with disabilities. To request reasonable accommodation in the job application or interview process, please contact [e-mail]. This email address is exclusively designated for such requests, aligning with federal and state disability laws.

The base pay range for this position is $96k - $130k/yr; however, base pay offered may vary depending on job-related knowledge, skills, and experience. This position is eligible for an annual bonus and restricted stock unit grant based on individual performance in addition to a full range of benefits outlined here. This information is provided per the relevant state and local pay transparency laws for the location in which this position will be performed. Base pay information is based on market location.