DevSecOps Engineer, Engineering & Operations

Cal Coast Credit Union; San Diego (CA); On-site; USD 131,000 - 164,000; Full time

Job summary

Cal Coast Credit Union seeks a DevSecOps Engineer to design, implement, and support secure automation, Infrastructure as Code, and CI/CD capabilities across on‑premises and cloud environments.

This role bridges Infrastructure, Operations, IT Security, Cloud, and Development teams, embedding security controls and governance to enable scalable, reliable deployments while advancing automation-first, policy-driven engineering across hybrid environments.

Qualifications

• Bachelor degree in IT/CS or equivalent; 5–7 years infra engineering experience.
• 7+ years in DevOps/DevSecOps, Infra, Cloud, or Security engineering.
• Experience with infrastructure automation and IaC tooling.
• Experience building or supporting CI/CD pipelines (Azure DevOps, GitHub Actions, Jenkins).
• Experience with Windows Server, Linux, VMware vSphere, networking, storage, and identity technologies.

Responsibilities

• Design, implement, and maintain secure DevSecOps automation across infra, cloud, app, and security platforms.
• Build and support CI/CD pipelines for deployment across environments.
• Develop IaC using Terraform, Ansible, PowerShell, Python, Bash, VMware Aria, ARM/Bicep.

Skills

DevSecOps

Infrastructure as Code

CI/CD

Terraform

Ansible

PowerShell

Python

Bash

VMware Aria

ARM/Bicep

Azure

Kubernetes

Docker

NSX

Horizon VDI

Azure Entra ID

IR/Identity Governance

Education

Bachelor of Science in IT/CS

Tools

Jira

Jira Service Management

Confluence

ServiceNow

Job description

JOB Objective

This position is responsible for designing, implementing, and supporting secure automation, Infrastructure as Code, and continuous integration and continuous delivery (CI/CD) capabilities across the organization’s technology environment. This role serves as a technical bridge between Infrastructure Engineering, Operations team, IT Security, Cloud Engineering, and Application Development. The DevSecOps Engine embeds security controls, automation, and governance through the technology lifecycle while enabling engineering teams to deliver scalable infrastructure, applications securely, consistently and efficiently. The ideal candidate is an automation-focused with strong infrastructure and security driven experience who understands how to transform traditional operational processes into repeatable policy-driven, and automated engineer practices. This position will play a key role in advancing DevSecOps, Infrastructure as Code, secure configuration management, vulnerability remediate, and platform engineering capabilities across on-premise and cloud environments.

JOB Objective

This position is responsible for designing, implementing, and supporting secure automation, Infrastructure as Code, and continuous integration and continuous delivery (CI/CD) capabilities across the organization’s technology environment. This role serves as a technical bridge between Infrastructure Engineering, Operations team, IT Security, Cloud Engineering, and Application Development. The DevSecOps Engine embeds security controls, automation, and governance through the technology lifecycle while enabling engineering teams to deliver scalable infrastructure, applications securely, consistently and efficiently. The ideal candidate is an automation-focused with strong infrastructure and security driven experience who understands how to transform traditional operational processes into repeatable policy-driven, and automated engineer practices. This position will play a key role in advancing DevSecOps, Infrastructure as Code, secure configuration management, vulnerability remediate, and platform engineering capabilities across on-premise and cloud environments.

DIMENSIONS

• Components Supported: Multiple Redundant Datacenters
• Multiple Cloud-Based Infrastructure (IaaS)
• 700+ Desktop Systems
• 100+ Mobile Devices
• 175+ Servers
• Multiple Redundant Unified Communications Systems
• 26 Branch Locations & Spectrum Center

Supervisory Responsibilities

This position reports directly to the VP, IT Engineering & Operations.

NATURE & SCOPE

• Design, implement, and maintain secure DevSecOps automation frameworks across infrastructure, cloud, application, and security platforms.
• Build and support CI/CD pipelines for application, infrastructure, and configuration deployment across development, testing, staging, and production environments.
• Develop Infrastructure as Code using tools such as Terraform, Ansible, VMware Aria, ARM/Bicep, PowerShell, Python, or Bash.
• Automate provisioning, configuration management, patching, vulnerability remediation, and security hardening across Windows, Linux, VMware, Azure, and hybrid environments.
• Integrate security controls into CI/CD pipelines, including vulnerability scanning, secrets detection, code scanning, configuration validation, and policy enforcement.
• Partner with Cybersecurity to support vulnerability management, security remediation, risk mitigation, penetration test findings, and audit response activities.
• Implement automated compliance and configuration checks aligned with FFIEC, NCUA, CIS, NIST, and internal security standards.
• Support secure cloud and identity governance across Microsoft Azure, Entra ID, RBAC, privileged access, service principals, and managed identities.
• Develop automation to improve operational reliability, monitoring, observability, incident response, and post-deployment validation.
• Partner with Infrastructure teams on VMware vSphere, NSX, Horizon, storage, server, network, and cloud modernization initiatives.
• Collaborate with Application Development teams to improve secure release management, deployment automation, source control, and SDLC practices.
• Support container and platform engineering capabilities using Docker, Kubernetes, or similar technologies.
• Create reusable automation templates, deployment standards, technical documentation, architecture diagrams, and operational runbooks.
• Promote security-by-design, automation-first, GitOps, and DevSecOps practices across technology teams.
• Evaluate emerging technologies and recommend improvements that enhance security, reliability, efficiency, and scalability.
• Exercises discretion and independent decision-making in IT necessary to ensure the growth of the credit union in a manner that supports the credit union’s mission and increases the profitability of the organization.
• Performs other duties as required.

Education, Skills, & Abilities

The Eight Superpowers

• Provides leadership through modeling of behaviors and bringing forward new ideas and new ways of doing things.
• Demonstrates empathy, self-reflection, and adjustment of own behaviors, showing effective emotional intelligence.
• Practices active listening in communications with others, giving someone full attention and listening to understand, not just respond.
• Demonstrates grit, persisting in application of knowledge, skills, and behaviors to achieve goals and address obstacles.
• Models intrinsic motivation; is self-driven to meet or exceed objectives, timelines, and quality measures while building and sustaining effective relationships.
• Applies creative problem-solving to provide clarity, handle resources under one's control, and address stressful situations; finds ways to meet individual, team, and member goals, by navigating through barriers.
• Shares a diverse set of perspectives, work and life experiences, as well as religious and cultural differences. Actively seeks out differences in values, ideas, and priorities. Respects and value the differences of others, including but not limited to: national origin, language, race, color, disability, ethnicity, gender, age, religion, sexual orientation, gender identity, socioeconomic status, veteran status, and family structures. Believes a diverse workplace is essential to the company's success.
• Values and shows appreciating for the unique qualities and experiences of each person-inclusion; appreciates and effectively utilizes the talents and skills of others to achieve objectives; is open to the perspective of others; and encourages collaboration, flexibility and fairness. Makes each employee feel valued and supported for their unique qualities.

Other Education, Skills, And Abilities

• Requires a Bachelor of Science Degree with an emphasis in Information Technology/Systems, Computer Science, IT Engineering, or equivalent experience. Requires 5–7 years of related infrastructure engineering experience.
• Seven or more years of experience in DevOps, DevSecOps, Infrastructure Engineering, Systems Engineering, Cloud Engineering, or Security Engineering.
• Strong hands‑on experience with infrastructure automation and Infrastructure as Code.
• Experience with Terraform, Ansible, PowerShell, Python, Bash, VMware Aria, ARM/Bicep, or similar automation technologies.
• Experience building or supporting CI/CD pipelines using Azure DevOps, GitLab, Jenkins, GitHub Actions, Bitbucket, or similar platforms.
• Strong understanding of Windows Server, Linux, VMware vSphere, networking, storage, cloud, and identity technologies.
• Experience integrating security controls into infrastructure and software delivery processes.
• Knowledge of vulnerability management, secure configuration, patch automation, system hardening, and remediation workflows.
• Experience with Microsoft Azure, Microsoft Entra ID, Active Directory, RBAC, and hybrid identity environments.
• Strong troubleshooting, documentation, communication, and cross-functional collaboration skills.
• Experience working in a credit union, bank, financial services, healthcare, government, or other regulated environment.
• Familiarity with FFIEC, NCUA, GLBA, NIST Cybersecurity Framework, CIS Controls, and audit/regulatory expectations.
• Experience with VMware NSX, Horizon VDI, Azure networking, hybrid cloud, and enterprise infrastructure modernization.
• Experience with SAST, DAST, software composition analysis, container scanning, secrets management, and IaC security scanning.
• Experience with Jira, Jira Service Management, Confluence, ServiceNow, or similar ITSM and Agile tools.
• Experience with privileged access management, endpoint security, vulnerability scanning, and security orchestration tools.
• Experience with Docker, Kubernetes, Helm, or OpenShift.
• Certifications such as Azure DevOps Engineer, Azure Solutions Architect, Security+, CISSP, CCSP, Terraform, Ansible, VMware VCP, or Kubernetes certification preferred.

MAJOR Accountabilities

• Increased adoption of Infrastructure as Code and automated deployment practices.
• Reduced vulnerability remediation timelines.
• Improved configuration compliance and audit readiness.
• More secure and reliable CI/CD pipelines.
• Reduced manual infrastructure and application deployment work.
• Stronger collaboration between Infrastructure, Cybersecurity, and Application Development.
• Improved operational stability, repeatability, and security across hybrid environments.

Physical Requirements

• Ability to work within a datacenter environment; requires the ability to tolerate periods of continuous standing.
• Must be able to lift up to 50 lbs.
• Ability to tolerate periods of continuous sitting.

ENVIRONMENTAL CONDITIONS

• Work is primarily performed within an enclosed office. Subject to standard background noise found in an office environment.

Note: Staff is expected to perform various tasks, projects and administrative duties as assigned

Management reserves the right to assign or change duties and tasks to this position at its discretion

Salary Range (annually)

$130,813.6560 - $163,517.0700