DevSecOps Engineer: Secure CI/CD & Cloud Infra

JDA Software; Dallas (TX); Hybrid; USD 90,000 - 120,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401K with Matching

Flexible Time Off

Corporate Fitness Program

Job summary

Blue Yonder seeks a DevSecOps Engineer to weave security into CI/CD and cloud-native platforms. You will automate tests, scan for vulnerabilities, and enforce secure IaC across Kubernetes environments.

You will collaborate with development, QA, and security teams to integrate security into every stage of the SDLC and ensure DoD/Gov compliance where applicable. Hybrid in Dallas, with in-office requirements.

Qualifications

• 3–6 years in DevOps, DevSecOps, or security engineering.
• Experience building and maintaining CI/CD pipelines.
• Experience with cloud platforms AWS/Azure/GCP.
• Experience with containers Docker/Kubernetes.
• Understanding SSDLC practices.
• Experience integrating SAST, DAST, SCA, container scanning.
• Scripting in Python or Bash.
• Familiarity with IaC tools (Ansible, Terraform, CloudFormation).

Responsibilities

• Design and implement security controls within CI/CD pipelines.
• Integrate automated security testing tools such as SAST, DAST, SCA, and container scanning.
• Embed security checks into build and deployment processes to identify vulnerabilities early in the SDLC.
• Secure cloud infrastructure, containers, and Kubernetes environments.
• Implement Infrastructure-as-Code security scanning and policy enforcement.
• Develop automation scripts and integrations to support security workflows.
• Maintain and enhance CI/CD platforms and pipeline security tooling.
• Collaborate with developers and QA teams to promote secure coding practices.
• Assist engineering teams in remediating vulnerabilities identified during testing and scanning.
• Collaborate with internal and customer security teams to implement organizational security standards.
• Support security compliance requirements such as SOC2, FedRAMP, or DoD security standards where applicable.
• Assist with security audits and vulnerability remediation tracking.
• Help maintain documentation of DevSecOps processes and controls.

Skills

DevSecOps

CI/CD automation

Cloud security

Kubernetes security

Container security

Vulnerability management

Scripting (Python/Bash)

IaC security tooling

Tools

GitHub Actions

Jenkins

GitLab CI

AWS

Azure

GCP

Docker

Kubernetes

Job description

Blue Yonder seeks a DevSecOps Engineer to weave security into CI/CD and cloud-native platforms. You will automate tests, scan for vulnerabilities, and enforce secure IaC across Kubernetes environments.

You will collaborate with development, QA, and security teams to integrate security into every stage of the SDLC and ensure DoD/Gov compliance where applicable. Hybrid in Dallas, with in-office requirements.