DevSecOps Engineer: Secure CI/CD & Cloud Automation

Berkadia; Ambler (Montgomery County); Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

Volunteer hours & donations

Tuition reimbursement

Parental leave 12 weeks

Mental health support

Pet insurance

Employee resource groups

Job summary

Berkadia is seeking an experienced DevSecOps Engineer to strengthen security across the software development lifecycle. You will help research, implement, and support secure coding practices, monitor vulnerabilities, and automate security across CI/CD pipelines.

You will work with cloud platforms like Azure/AWS, collaborate with engineering and security teams, and drive robust risk mitigation while continuously improving security tooling and processes.

Qualifications

• Strong development knowledge in NodeJS, Python, and TypeScript.
• Solid understanding of DevSecOps principles and secure SDLC practices.
• Experience building secure, efficient CI/CD pipelines and automating security tasks.

Responsibilities

• Research, develop, and support deployment of security solutions.
• Monitor and remediate coding and open-source vulnerabilities in the SDLC.
• Secure enterprise apps on cloud platforms with emphasis on automation and reliability.
• Collaborate with cross-functional teams on CI/CD security and remediation efforts.
• Identify risks, assign ownership, and drive remediation with stakeholders.
• Communicate effectively with technology and business teams.

Skills

NodeJS

Python

TypeScript

DevSecOps principles

CI/CD pipelines

Tools

SAST tools

DAST tools

Cloud platforms

Job description

Berkadia is seeking an experienced DevSecOps Engineer to strengthen security across the software development lifecycle. You will help research, implement, and support secure coding practices, monitor vulnerabilities, and automate security across CI/CD pipelines.

You will work with cloud platforms like Azure/AWS, collaborate with engineering and security teams, and drive robust risk mitigation while continuously improving security tooling and processes.