DevSecOps Engineer II - SaaS

Esri; Redlands (CA); On-site; USD 101,000 - 167,000; Full time

Benefits offered by this job

Health benefits

Paid holidays

401(k) and profit sharing

Job summary

Esri, a leader in geospatial SaaS, seeks a DevSecOps Engineer to strengthen secure software delivery. You will build secure CI/CD pipelines, implement IaC, and integrate SAST/DAST/SCA tools into development workflows.

The role requires hands-on Docker, Terraform, Ansible, and cloud familiarity across AWS and Azure. You will automate provisioning via cloud APIs, manage credentials and encryption, and collaborate across teams developing Esri’s SaaS, desktop, and enterprise products with a

Qualifications

• BS in CS/Engineering, Data Science, or related field.
• Experience building secure CI/CD pipelines in SaaS.
• Hands-on with Terraform and Ansible; Docker experience required.

Responsibilities

• Build secure CI/CD pipelines and automation with IaC.
• Develop automation in Python/JS and similar languages.
• Integrate security tooling into development workflows
• Manage secure container workloads with Docker
• Monitor and log across AWS and Azure; automate provisioning via APIs
• Apply secure identity, authentication, and key management
• Contribute to secure development standards and docs

Skills

DevSecOps

CI/CD

Python

Cloud platforms

Linux/PowerShell

Terraform

Ansible

Docker

GitHub Actions

Security tooling

Education

Bachelor's degree in CS/Engineering/Data Science or related

Master's degree (preferred)

Tools

Terraform

Ansible

Docker

GitHub Actions

SAST/DAST/SCA tools

Job description

Overview

If you’ve worked at a software company and enjoy building secure, scalable platforms, this DevSecOps Engineer role offers the chance to apply that experience to the world’s largest geospatial Software as a Service offering. In this role, you will help strengthen the security of modern engineering systems by supporting continuous compliance, continuous risk assessment, data encryption, monitoring, and alerting through infrastructure as code practices. We’re looking for a thoughtful, security-minded engineer who understands how software teams build and ship products and is excited to help shape the next generation of secure SaaS at Esri.

Responsibilities

• Build and maintain secure CI/CD pipelines and automation, using Infrastructure and Automation as Code
• Develop automation using Python, JavaScript, or similar languages (such as Go, Rust, Ruby)
• Integrate and administer security tooling (SAST, DAST, SCA) within development pipelines
• Implement and secure containerized workloads using Docker
• Define and operate monitoring, logging, and alerting across AWS and Azure
• Automate provisioning, configuration, and enforcement using AWS and Azure Management APIs
• Apply secure identity, authentication, and cryptographic practices, including OAuth 2.0, X.509 certificates, and key management
• Build automated tooling leveraging AI Integration (CoPilot, GPT, Claude, and more) to handle non-deterministic workloads
• Develop against the Microsoft Fabric Stack (SharePoint, PowerApps, Power Automate, Power BI) with an emphasis on security and automation, along with utilizing GitHub Actions
• Contribute to secure development standards, operational documentation, and support procedures
• Work across teams developing Esri’s SaaS, desktop, and enterprise server products, along with the extensions and apps hosted inside of them covering various domains of geospatial data and operations
• Work across a diverse set of development and CI/CD practices and technologies, utilizing a variety of software languages, to improve their security and compliance

Requirements

• 2+ years of DevOps or DevSecOps engineering experience, preferably in cloud-based SaaS
• Experience with DevOps/DevSecOps practices, including IaC and automation-first design
• Experience building and operating CI/CD pipelines (GitHub Actions, GitLab CI, CircleCI)
• AI driven exploit discovery & analysis, AI code review
• Proficiency with Linux and Windows, including Bash and PowerShell scripting
• Hands‑on experience with Terraform and Ansible
• Experience integrating and automating web and cloud APIs
• Experience administering security tools and integrating them into pipelines
• Strong understanding of package management, dependency control, and supply‑chain security
• Experience with Docker and container‑based workflows
• Proficiency with Git/GitHub, including branching and code reviews
• Experience implementing monitoring, logging, and alerting in cloud environments
• Experience applying secure development practices in a SaaS environment
• Visa sponsorship is not available for this posting. Applicantsmust be authorized to work for any employer in the U.S.
• Bachelor's degree in Computer Science, Engineering, Information Systems, Data Science, or related field

Recommended Qualifications

• Master's degree in Computer Science, Engineering, Information Systems, Data Science, or related field
• Security or technical certifications (such as CISSP, SSCP, GIAC, CEH, OSCP) are desirable
• Experience with AI agents, AI‑assisted development, and AI security
• Knowledge of security frameworks such as OWASP Top 10, SANS Top 25, BSIMM, and CISA Secure Development Guidance
• Experience integrating test automation (such as Selenium) into CI/CD pipelines
• Familiarity with compliance frameworks (NIST, ISO 27001, FedRAMP, FIPS)
• Experience supporting regulated environments and audit readiness
• Strong collaboration and communication skills
• Familiarity with Esri software
• Familiarity with Jenkins

#LI-AL1

#LI-Onsite

Total Rewards

Esri’s competitive total rewards strategy includes industry-leading health and welfare benefits: medical, dental, vision, basic and supplemental life insurance for employees (and their families), 401(k) and profit‑sharing programs, minimum accrual of 80 hours of vacation leave, twelve paid holidays throughout the calendar year, and opportunities for personal and professional growth. Base salary is one component of our total rewards strategy. Compensation decisions and the base range for this role take into account many factors including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs.

Base salary range: $101,192 — $167,336 USD

The Company

At Esri, diversity is more than just a word on a map. When employees of different experiences, perspectives, backgrounds, and cultures come together, we are more innovative and ultimately a better place to work. We believe in having a diverse workforce that is unified under our mission of creating positive global change. We understand that diversity, equity, and inclusion is not a destination but an ongoing process. We are committed to the continuation of learning, growing, and changing our workplace so every employee can contribute to their life’s best work. Our commitment to these principles extends to the global communities we serve by creating positive change with GIS technology. For more information on Esri’s Racial Equity and Social Justice initiatives, please visit our website here.

If you don’t meet all of the preferred qualifications for this position, we encourage you to still apply!

Esri is an equal opportunity employer (EOE) and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability status, protected veteran status, or any other characteristic protected by law. If you need reasonable accommodation for any part of the employment process, please email [e-mail] and let us know the nature of your request and your contact information. Please note that only those inquiries concerning a request for reasonable accommodation will be responded to from this e-mail address.

Esri Privacy Esri takes our responsibility to protect your privacy seriously. We are committed to respecting your privacy by providing transparency in how we acquire and use your information, giving you control of your information and preferences, and holding ourselves to the highest national and international standards, including CCPA and GDPR compliance.