DevSecOps Engineer - CESO, Inc.

OpenTalent; Dayton (OH); On-site; USD 110,000 - 140,000; Full time

Job summary

CESO is seeking a DevSecOps Engineer to design, build, and automate our cloud infrastructure and hosting environments. The role bridges infrastructure, software development, and cybersecurity to ensure scalable, reliable, and secure operations.

You will own Azure standards, CI/CD pipelines, security controls, observability, and disaster recovery, while partnering with engineering teams to implement secure coding practices and threat modeling across development, testing, and production.

Qualifications

• Experience securing cloud infrastructure and hosting environments.
• Strong knowledge of Azure services, networking, and identity.
• Experience building CI/CD pipelines and automation.

Responsibilities

• Develop and maintain infrastructure standards and environment management practices.
• Build, maintain, and optimize CI/CD pipelines and automated deployment processes.
• Own Azure networking architecture, including virtual networks and secure remote access.
• Manage Azure RBAC and least-privilege security models.
• Partner with software engineering teams to implement secure coding practices.
• Configure and manage security scanning and vulnerability management processes.
• Design and support perimeter security solutions (WAF, Front Door, Application Gateway).
• Implement monitoring, logging, observability, and telemetry solutions.
• Design and maintain disaster recovery and business continuity solutions.
• Maintain architecture documentation and deployment procedures.
• Provide analytical and problem-solving expertise to stakeholders.

Job description

Are you seeking purpose, challenge, and talented colleagues? We develop leaders and empower our associates to use their skills and talents to positively impact the world through service – to our coworkers, clients, and communities. We subscribe to the mission of “empowering our people to impact communities by bringing clients’ visions to life,” so if this speaks to you, let’s connect!

At CESO, a DevSecOps Engineer is responsible for designing, building, securing, automating, and maintaining the company's cloud infrastructure and application hosting environments. This position serves as the bridge between infrastructure, software development, and cybersecurity, ensuring that applications and services are secure, scalable, reliable, and operationally efficient. The DevSecOps Engineer owns Azure infrastructure standards, CI/CD pipelines, infrastructure automation, security controls, observability, disaster recovery planning, and environment management across development, testing, and production environments. This position plays a critical role in establishing secure development practices, protecting enterprise systems, and enabling rapid delivery of business applications and AI solutions.

Primary Responsibilities

• Develop and maintain infrastructure standards, governance policies, naming conventions, tagging strategies, and environment management practices.
• Build, maintain, and optimize CI/CD pipelines and automated deployment processes that support application and infrastructure delivery, including environment provisioning, approval gates, rollback strategies, and release management procedures.
• Own Azure networking architecture, including virtual networks, private endpoints, VPN connectivity, DNS, network segmentation, and secure remote access.
• Manage Azure RBAC, managed identities, service principals, privileged access, and least-privilege security models.
• Partner with software engineering teams to implement secure coding practices, application security controls, and security-focused development workflows.
• Configure and manage SAST, DAST, dependency scanning, code quality controls, and vulnerability management processes.
• Design and support perimeter security solutions including Web Application Firewalls (WAF), Azure Front Door, Application Gateway, and related technologies.
• Implement monitoring, logging, observability, alerting, and telemetry solutions using Azure Monitor, Application Insights, Log Analytics, and related platforms.
• Design and maintain high availability, backup, geo-replication, disaster recovery, and business continuity solutions.
• Maintain architecture documentation, operational runbooks, deployment procedures, and technical reference materials.
• Provide analytical and problem-solving expertise to evaluate opportunities, and decisions and communication them to relevant parties within the organization.