DevSecOps Engineer: Hardened CI/CD & Cloud Security

DIVERGENT; Los Angeles (CA); Hybrid; USD 116,000 - 181,000; Full time

Benefits offered by this job

Compensation package

Wellness & time off

Health benefits

Professional development

Collaborative environment

Job summary

Divergent is seeking a DevSecOps Engineer to embed security into every stage of the software delivery lifecycle. You will own automation for hardened CI/CD pipelines, policy-as-code guardrails, and reprovisioned cloud infrastructure across Azure and AWS.

You will partner with software, platform, and IT teams to reduce risk while keeping delivery fast, treating security as an engineering problem to be solved with tooling rather than checklists.

Qualifications

• At least 5–10 years in DevOps, platform, or security engineering.
• 3+ years securing CI/CD pipelines or cloud infrastructure.
• Bachelor's degree or equivalent technical experience.

Responsibilities

• Design, build, and maintain CI/CD pipelines with automated security gates.
• Provision and manage cloud infrastructure as code across Azure and AWS.
• Harden container and Kubernetes workloads and enforce least-privilege access.
• Manage secrets and pipeline authentication to eliminate long-lived keys.
• Triagem and remediation of vulnerabilities across code, dependencies, and containers.
• Build and maintain software supply chain controls and SBOM generation.
• Instrument security observability with detections and dashboards.
• Automate cloud security posture assessments and remediation.
• Support framework mapping and automated audit evidence generation.
• Mentor engineers to raise security baseline across teams.

Skills

DevSecOps

CI/CD pipelines

Cloud security

Python/Go/Bash

IaC (Terraform/Bicep)

Kubernetes

Git/GitHub workflows

SAST/DAST tooling

Security automation

Education

Bachelors in CS/Info Systems

Tools

Terraform

GitHub Actions

Jenkins

Kubernetes tooling

Job description

Divergent is seeking a DevSecOps Engineer to embed security into every stage of the software delivery lifecycle. You will own automation for hardened CI/CD pipelines, policy-as-code guardrails, and reprovisioned cloud infrastructure across Azure and AWS.

You will partner with software, platform, and IT teams to reduce risk while keeping delivery fast, treating security as an engineering problem to be solved with tooling rather than checklists.