DevSecOps Engineer (Azure)

Spectraforce Technologies; Chicago (IL); Hybrid; USD 110,000 - 193,000; Full time

Job summary

Spectraforce Technologies is seeking a DevSecOps Engineer (Azure) for a 04-month contractor role in Chicago, IL. You will design and implement secure, scalable ingestion pipelines, immutable storage, and key encryption workflows on Azure across APIM, Functions, Cosmos DB, and Blob Storage.

The role emphasizes hands-on Terraform IaC, NoSQL management, and deep security controls including zero-trust networking. Strong coding in Python/Node and experience with CI/CD is required.

Qualifications

• We require 5+ years building production workloads on Azure with event-driven and API-first architectures.
• Strong APIM experience with policies, backends, and developer portal management.
• Experience implementing immutable/storage patterns (WORM, tamper-evident logs) and Cosmos DB change feed auditing.
• Proficient in NoSQL databases and Cosmos DB management.
• Solid Terraform skills including modules, remote state, and CI/CD integration.
• Solid coding in Python and Node; familiarity with envelope encryption using Key Vault.

Responsibilities

• Design and implement API ingestion pipelines via Azure API Management with OAuth2/JWT validation, rate limiting, and schema enforcement
• Build event-driven ingestion workflows using Azure Service Bus and Azure Functions (durable, fan-out patterns)
• Implement immutable artifact storage using Azure Blob Storage with WORM policies and Cosmos DB for metadata indexing
• Architect Redis Cache for high-throughput query caching while preserving immutability
• Integrate Azure Key Vault for envelope encryption and automated rotation
• Build Log Analytics Workspace telemetry pipelines covering ingestion events, access audit trails, and integrity verification logs
• Write Terraform IaC for all infrastructure - policy-as-code compliant
• Implement third-party tool integrations (connector APIs) to ingest evidence artifacts

Skills

Azure expertise

Event-driven architecture

API-first design

Python

Node.js

Zero-trust networking

Terraform IaC

GitHub Actions / Azure DevOps

Cryptographic integrity concepts

Education

Bachelor's degree in Computer Science or related

Tools

Azure API Management (APIM)

Azure Functions

Azure Cosmos DB

Azure Blob Storage

Azure Key Vault

Terraform

GitHub Actions

Azure DevOps

Job description

DevSecOps Engineer (Azure)

Chicago, IL 3 days Hybrid

04 Months

Role description

We are building a cloud-native immutable evidencing platform to ingest compliance artifacts, audit evidence, and control attestations from a wide range of internal tools via API, store them with cryptographic integrity guarantees, and expose querying and retrieval capabilities to downstream GRC and audit workflows. The contractor will help design, build, and harden this platform on Azure in alignment with PCI-DSS, SOX, and GLBA requirements.

Responsibilities

• Design and implement API ingestion pipelines via Azure API Management (APIM) with OAuth2/JWT validation, rate limiting, and schema enforcement
• Build event-driven ingestion workflows using Azure Service Bus and Azure Functions (durable, fan-out patterns)
• Implement immutable artifact storage using Azure Blob Storage with WORM policies (time-based retention locks) and Azure Cosmos DB for tamper-evident metadata indexing
• Architect Redis Cache for high-throughput query caching while preserving source-of-truth immutability guarantees
• Integrate Azure Key Vault for envelope encryption of stored artifacts (customer-managed keys, automated rotation)
• Build Log Analytics Workspace telemetry pipelines covering ingestion events, access audit trails, and integrity verification logs
• Write Terraform IaC for all infrastructure - no click-ops; all resources policy-as-code compliant
• Implement third-party tool integrations (connector APIs) to ingest evidence artifacts from source systems

Skills

• 5+ years building production workloads on Azure; demonstrated experience with event-driven and API-first architectures
• Strong APIM experience: policies (inbound/outbound XML), backends, named values, developer portal, versioning
• Experience implementing immutable/append-only storage patterns - WORM blob policies, Cosmos DB change feed auditing, or equivalent
• Deploy and Manage NoSQL and CosmosDB database experience
• Solid Terraform skills: modules, remote state, Azure Provider, CI/CD integration via GitHub Actions or Azure DevOps
• Strong coding experience in Python and Node
• Familiarity with envelope encryption patterns using Key Vault (CMK, key rotation, purge protection)
• Understanding of zero-trust network design: Private Endpoints, VNet integration, NSG/UDR patterns
• Ability to write KQL for operational queries, alerting rules, and audit log analysis
• Experience integrating with third-party tool APIs (GRC platforms, vulnerability scanners, ticketing systems, or similar)
• Hands-on proficiency with integrated testing tools
• Effective written and verbal communication skills to collaborate with cross-functional teams
• Desired certifications such as Azure Security Engineer Associate certification, and AWS-certified security - Specialty, CISSP and CCSP
• Degree in Computer Science, Information Management, or related field preferred