Lead DevSecOps Engineer — Secure SDLC & GitHub Automation

Cleveland-Cliffs Inc.; United States; On-site; USD 120,000 - 160,000; Full time

Job summary

Cleveland-Cliffs Inc. is seeking a Lead IT DevSecOps Engineer in Cleveland, OH to consolidate source control and CI/CD onto GitHub and embed Secure SDLC into every pipeline.

The role collaborates with Cybersecurity, IT Infrastructure, and Applications leaders to drive secure, scalable workflows across a large multi-platform estate, with opportunities for technical and leadership growth.

Qualifications

• Bachelor's degree in Computer Science or related field or equivalent experience.
• 6+ years in DevOps/DevSecOps or platform engineering.
• Hands-on with repository and CI/CD consolidations or migrations.
• Strong skills in NodeJS and C#; Python valued.
• Deep proficiency with Git, GitHub, and GitHub Actions.
• Experience integrating SAST/DAST, dependency scanning, and secret detection in CI/CD.
• Working knowledge of containerization and a major cloud platform (Azure preferred).
• Must be able to work full-time onsite; eligible to work in the United States; no sponsorship provided.

Responsibilities

• Consolidate source control and CI/CD onto GitHub.
• Partner with application development teams to migrate repositories and set standards, branching strategy, and governance.
• Champion Secure SDLC across pipelines.
• Integrate SAST, DAST, dependency scanning, secret detection into pipelines; drive adoption.
• Build the automation and the platform; design CI/CD pipelines using GitHub Actions.
• Author build and deployment automation in NodeJS and C#.
• Administer DevOps infrastructure, container registries, and cloud platform services.
• Coach developers and create reusable patterns for secure-by-default workflows.
• Go hands-on where acceleration is needed; year 1 focuses on consolidation and Secure SDLC foundation; year 2+ expands to AI/ML security.

Skills

NodeJS

C#

Scripting

Git

GitHub

CI/CD

Secure SDLC

Education

Bachelor's degree in Computer Science/IT or related field

Tools

GitHub Actions

Azure

Terraform

ARM templates

Job description

Cleveland-Cliffs Inc. is seeking a Lead IT DevSecOps Engineer in Cleveland, OH to consolidate source control and CI/CD onto GitHub and embed Secure SDLC into every pipeline.

The role collaborates with Cybersecurity, IT Infrastructure, and Applications leaders to drive secure, scalable workflows across a large multi-platform estate, with opportunities for technical and leadership growth.