DevSecOps Engineer: Secure SDLC & CI/CD Leader

ITAC Solutions; Birmingham (AL); On-site; USD 66,000 - 76,000; Full time

Benefits offered by this job

High-impact role

Cross-functional teamwork

Exposure to modern DevSecOps tooling

Security training leadership

Industry recognition

Job summary

ITAC Solutions is seeking an Information Security Development Engineer in Birmingham, AL, onsite, under a contract-to-hire arrangement. You will embed security throughout the software development lifecycle, building secure CI/CD pipelines and driving security awareness across teams.

The role involves designing secure CI/CD pipelines, IaC with security-first principles, and automated security testing, while collaborating with engineering, compliance, and operations.

Qualifications

• Experience with healthcare regulatory frameworks (HIPAA, HITECH, CMS).
• Hands-on experience with Infrastructure as Code tools (Terraform, CloudFormation, ARM/Bicep).
• Proficiency with SAST/DAST, dependency scanning, and cloud security posture management.

Responsibilities

• Design, implement, and maintain secure CI/CD pipelines across applications, APIs, and cloud platforms.
• Develop and manage infrastructure as code with security-first principles.
• Embed threat modeling and security review gates into engineering workflows.
• Monitor, detect, and respond to security vulnerabilities and incidents.
• Support regulatory compliance and contribute to audits and control implementation.

Skills

DevSecOps tooling

CI/CD pipelines

Threat modeling

Cloud security

Kubernetes

Tools

Terraform

CloudFormation

ARM/Bicep

SAST/DAST

Container scanning

Job description

ITAC Solutions is seeking an Information Security Development Engineer in Birmingham, AL, onsite, under a contract-to-hire arrangement. You will embed security throughout the software development lifecycle, building secure CI/CD pipelines and driving security awareness across teams.

The role involves designing secure CI/CD pipelines, IaC with security-first principles, and automated security testing, while collaborating with engineering, compliance, and operations.