DevSecOps Engineer, Engineering & Operations

California Coast Credit Union; San Diego (CA); On-site; USD 131,000 - 164,000; Full time

Job summary

California Coast Credit Union is seeking a DevSecOps Engineer to design, implement, and support secure automation, infrastructure as code, and CI/CD capabilities across on‑premises and cloud environments.

The role emphasizes security controls, automation, and governance to enable scalable infrastructure and secure software delivery. Bachelor’s in IT/CS and 7+ years in infrastructure/DevSecOps are preferred.

Qualifications

• Requires a Bachelor of Science Degree with emphasis in IT/Systems, Computer Science, IT Engineering, or equivalent experience.
• 7+ years of related infrastructure engineering experience; 5–7 years noted in the ad.
• Proven experience with infrastructure automation and Infrastructure as Code.
• Experience with Terraform, Ansible, PowerShell, Python, Bash, VMware Aria, ARM/Bicep, or similar automation tech.
• Experience building or supporting CI/CD pipelines using Azure DevOps, GitLab, Jenkins, GitHub Actions, Bitbucket, or similar platforms.
• Strong knowledge of Windows Server, Linux, VMware vSphere, networking, storage, cloud, and identity technologies.
• Experience integrating security controls into delivery processes; vulnerability management and remediation workflows.
• Familiarity with Azure, Entra ID, Active Directory, RBAC, and hybrid identity environments.
• Experience with Docker, Kubernetes, Helm, or OpenShift; knowledge of SAST/DAST and container scanning.
• Certifications such as Azure DevOps Engineer, Azure Solutions Architect, Security+, CISSP, CCSP, Terraform, Ansible, VMware VCP, Kubernetes preferred.

Responsibilities

• Design, implement, and maintain secure DevSecOps automation frameworks across infrastructure, cloud, application, and security platforms.
• Build and support CI/CD pipelines for deployment across development, testing, staging, and production.
• Develop Infrastructure as Code using Terraform, Ansible, VMware Aria, ARM/Bicep, PowerShell, Python, or Bash.
• Automate provisioning, configuration, patching, vulnerability remediation, and security hardening across Windows, Linux, VMware, Azure, and hybrid environments.
• Integrate security controls into CI/CD pipelines, including vulnerability scanning and policy enforcement.
• Partner with Cybersecurity for vulnerability management, audit responses, and remediation activities.
• Implement automated compliance and configuration checks per FFIEC/NCUA/NIST/CIS standards.
• Support secure cloud and identity governance (Azure, Entra ID, RBAC, managed identities).
• Develop automation to improve reliability, monitoring, and incident response across environments.
• Collaborate with Infrastructure and Application Development teams to improve secure release management and deployment automation.
• Promote security-by-design, GitOps, and DevSecOps practices across teams.

Skills

Automation mindset

CI/CD

Security mindset

Collaboration

Cloud engineering

Education

Bachelor of Science in IT/Systems or Computer Science

Tools

Terraform

Ansible

VMware Aria

ARM/Bicep

PowerShell

Python

Bash

Azure DevOps

GitHub Actions

Jenkins

GitLab

Docker

Kubernetes

NSX

Horizon

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

DevSecOps Engineer, Engineering & Operations

2 days ago Requisition ID: 2554

Salary Range: $130,813.65 To $163,517.07 Annually

JOB Objective

This position is responsible for designing, implementing, and supporting secure automation, Infrastructure as Code, and continuous integration and continuous delivery (CI/CD) capabilities across the organization’s technology environment. This role serves as a technical bridge between Infrastructure Engineering, Operations team, IT Security, Cloud Engineering, and Application Development. The DevSecOps Engine embeds security controls, automation, and governance through the technology lifecycle while enabling engineering teams to deliver scalable infrastructure, applications securely, consistently and efficiently. The ideal candidate is an automation-focused with strong infrastructure and security driven experience who understands how to transform traditional operational processes into repeatable policy-driven, and automated engineer practices. This position will play a key role in advancing DevSecOps, Infrastructure as Code, secure configuration management, vulnerability remediate, and platform engineering capabilities across on‑premise and cloud environments.

DIMENSIONS

Components Supported: Multiple Redundant Datacenters

Multiple Cloud-Based Infrastructure (IaaS)

700+ Desktop Systems

175+ Servers

26 Branch Locations & Spectrum Center

Supervisory responsibilitieS

This position reports directly to the VP, IT Engineering & Operations.

NATURE & SCOPE

• Design, implement, and maintain secure DevSecOps automation frameworks across infrastructure, cloud, application, and security platforms.
• Build and support CI/CD pipelines for application, infrastructure, and configuration deployment across development, testing, staging, and production environments.
• Develop Infrastructure as Code using tools such as Terraform, Ansible, VMware Aria, ARM/Bicep, PowerShell, Python, or Bash.
• Automate provisioning, configuration management, patching, vulnerability remediation, and security hardening across Windows, Linux, VMware, Azure, and hybrid environments.
• Integrate security controls into CI/CD pipelines, including vulnerability scanning, secrets detection, code scanning, configuration validation, and policy enforcement.
• Partner with Cybersecurity to support vulnerability management, security remediation, risk mitigation, penetration test findings, and audit response activities.
• Implement automated compliance and configuration checks aligned with FFIEC, NCUA, CIS, NIST, and internal security standards.
• Support secure cloud and identity governance across Microsoft Azure, Entra ID, RBAC, privileged access, service principals, and managed identities.
• Develop automation to improve operational reliability, monitoring, observability, incident response, and post‑deployment validation.
• Partner with Infrastructure teams on VMware vSphere, NSX, Horizon, storage, server, network, and cloud modernization initiatives.
• Collaborate with Application Development teams to improve secure release management, deployment automation, source control, and SDLC practices.
• Support container and platform engineering capabilities using Docker, Kubernetes, or similar technologies.
• Create reusable automation templates, deployment standards, technical documentation, architecture diagrams, and operational runbooks.
• Promote security‑by‑design, automation‑first, GitOps, and DevSecOps practices across technology teams.
• Evaluate emerging technologies and recommend improvements that enhance security, reliability, efficiency, and scalability.
• Exercises discretion and independent decision‑making in IT necessary to ensure the growth of the credit union in a manner that supports the credit union’s mission and increases the profitability of the organization.
• Performs other duties as required.

Education, skills, & abilities

The Eight Superpowers

• Provides leadership through modeling of behaviors and bringing forward new ideas and new ways of doing things.
• Demonstrates empathy, self‑reflection, and adjustment of own behaviors, showing effective emotional intelligence.
• Practices active listening in communications with others, giving someone full attention and listening to understand, not just respond.
• Demonstrates grit, persisting in application of knowledge, skills, and behaviors to achieve goals and address obstacles.
• Models intrinsic motivation; is self‑driven to meet or exceed objectives, timelines, and quality measures while building and sustaining effective relationships.
• Applies creative problem‑solving to provide clarity, handle resources under one's control, and address stressful situations; finds ways to meet individual, team, and member goals, by navigating through barriers.
• Shares a diverse set of perspectives, work and life experiences, as well as religious and cultural differences. Actively seeks out differences in values, ideas, and priorities. Respects and value the differences of others, including but not limited to: national origin, language, race, color, disability, ethnicity, gender, age, religion, sexual orientation, gender identity, socioeconomic status, veteran status, and family structures. Believes a diverse workplace is essential to the company's success.
• Values and shows appreciating for the unique qualities and experiences of each person‑inclusion; appreciates and effectively utilizes the talents and skills of others to achieve objectives; is open to the perspective of others; and encourages collaboration, flexibility and fairness. Makes each employee feel valued and supported for their unique qualities.

Other Education, Skills, and Abilities

• Requires a Bachelor of Science Degree with an emphasis in Information Technology/Systems, Computer Science, IT Engineering, or equivalent experience. Requires 5–7 years of related infrastructure engineering experience.
• Seven or more years of experience in DevOps, DevSecOps, Infrastructure Engineering, Systems Engineering, Cloud Engineering, or Security Engineering.
• Strong hands‑on experience with infrastructure automation and Infrastructure as Code.
• Experience with Terraform, Ansible, PowerShell, Python, Bash, VMware Aria, ARM/Bicep, or similar automation technologies.
• Experience building or supporting CI/CD pipelines using Azure DevOps, GitLab, Jenkins, GitHub Actions, Bitbucket, or similar platforms.
• Strong understanding of Windows Server, Linux, VMware vSphere, networking, storage, cloud, and identity technologies.
• Experience integrating security controls into infrastructure and software delivery processes.
• Knowledge of vulnerability management, secure configuration, patch automation, system hardening, and remediation workflows.
• Experience with Microsoft Azure, Microsoft Entra ID, Active Directory, RBAC, and hybrid identity environments.
• Strong troubleshooting, documentation, communication, and cross‑functional collaboration skills.
• Experience working in a credit union, bank, financial services, healthcare, government, or other regulated environment.
• Familiarity with FFIEC, NCUA, GLBA, NIST Cybersecurity Framework, CIS Controls, and audit/regulatory expectations.
• Experience with VMware NSX, Horizon VDI, Azure networking, hybrid cloud, and enterprise infrastructure modernization.
• Experience with SAST, DAST, software composition analysis, container scanning, secrets management, and IaC security scanning.
• Experience with Jira, Jira Service Management, Confluence, ServiceNow, or similar ITSM and Agile tools.
• Experience with privileged access management, endpoint security, vulnerability scanning, and security orchestration tools.
• Experience with Docker, Kubernetes, Helm, or OpenShift.
• Certifications such as Azure DevOps Engineer, Azure Solutions Architect, Security+, CISSP, CCSP, Terraform, Ansible, VMware VCP, or Kubernetes certification preferred.

MAJOR Accountabilities

• Increased adoption of Infrastructure as Code and automated deployment practices.
• Reduced vulnerability remediation timelines.
• Improved configuration compliance and audit readiness.
• More secure and reliable CI/CD pipelines.
• Reduced manual infrastructure and application deployment work.
• Stronger collaboration between Infrastructure, Cybersecurity, and Application Development.
• Improved operational stability, repeatability, and security across hybrid environments.

PHYSICAL REQUIREMENTS

• Ability to work within a datacenter environment; requires the ability to tolerate periods of continuous standing.
• Must be able to lift up to 50 lbs.
• Ability to tolerate periods of continuous sitting.

ENVIRONMENTAL CONDITIONS

• Work is primarily performed within an enclosed office. Subject to standard background noise found in an office environment.

Note: Staff is expected to perform various tasks, projects and administrative duties as assigned

Management reserves the right to assign or change duties and tasks to this position at its discretion.