Lead DevSecOps Engineer: Secure CI/CD on GitHub

AK Steel Corporation; Cleveland, Northern (OH, KY); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health insurance

Retirement plan

Education assistance

Paid time off

Job summary

Cleveland-Cliffs is seeking a Lead IT DevSecOps Engineer to consolidate source control and CI/CD onto GitHub, embedding Secure SDLC across pipelines. You will partner with development teams, drive governance, and implement SAST/DAST, dependency scanning, and secret detection across all builds.

The role requires 6+ years in DevOps/DevSecOps, strong NodeJS/C#, and Azure experience, plus onsite work in Cleveland, OH. An executive sponsorship can be provided by Cybersecurity and IT leadership.

Qualifications

• Bachelor's degree in Computer Science, IT, or related field, or equivalent work experience
• 6+ years in DevOps, DevSecOps, or platform engineering
• Hands-on experience with repository and CI/CD platform consolidations or migrations
• Strong scripting and programming skills in NodeJS and C# (Python also valued)
• Deep proficiency with Git, GitHub, and GitHub Actions
• Experience integrating SAST, DAST, dependency scanning, and secret detection into CI/CD pipelines
• Working knowledge of containerization and a major cloud platform (Azure preferred)
• Must be able to work full-time onsite
• Applicants must be legally authorized to work in the United States. Cleveland-Cliffs does not provide sponsorship for this position.

Responsibilities

• Consolidate source control and CI/CD onto GitHub
• Partner with application development teams to migrate repositories and set governance
• Champion Secure SDLC
• Integrate SAST, DAST, dependency scanning, secret detection into pipelines
• Build automation and the platform
• Design CI/CD pipelines using GitHub Actions
• Author build and deployment automation in NodeJS and C#; manage DevOps infrastructure
• Create templates and reusable patterns to promote secure-by-default practices
• Year 1 focus: consolidation and Secure SDLC foundation
• Year 2+ expand to include AI/ML pipeline security initiatives
• Offer growth into Architect/Principal or leadership roles
• Perform other duties as assigned

Skills

DevOps

DevSecOps

Git

GitHub Actions

NodeJS

C#

Azure

SAST/DAST

Education

Bachelor's degree in Computer Science or related

Tools

GitHub

Azure

Terraform

Job description

Cleveland-Cliffs is seeking a Lead IT DevSecOps Engineer to consolidate source control and CI/CD onto GitHub, embedding Secure SDLC across pipelines. You will partner with development teams, drive governance, and implement SAST/DAST, dependency scanning, and secret detection across all builds.

The role requires 6+ years in DevOps/DevSecOps, strong NodeJS/C#, and Azure experience, plus onsite work in Cleveland, OH. An executive sponsorship can be provided by Cybersecurity and IT leadership.