Lead IT DevSecOps Engineer

Cleveland-Cliffs; Cleveland (OH); On-site; USD 120,000 - 160,000; Full time

Job summary

Cleveland-Cliffs is seeking an experienced DevOps/DevSecOps professional to consolidate source control and CI/CD onto GitHub, and to champion a Secure SDLC across pipelines and teams. You will integrate SAST/DAST, enable automation, and design pipelines with GitHub Actions in a on-site Cleveland, OH setting.

The role emphasizes hands-on engineering of CI/CD, cloud and container platforms, with focus on secure, scalable automation and coaching developers toward secure-by-default practices.

Qualifications

• Bachelor’s degree in Computer Science, IT, or related field, or equivalent work experience.
• 6+ years in DevOps, DevSecOps, or platform engineering.
• Hands-on experience with repository and CI/CD consolidations or migrations.
• Strong scripting and programming skills in NodeJS and C# (Python also valued).
• Deep proficiency with Git, GitHub, and GitHub Actions.
• Experience integrating SAST, DAST, dependency scanning, and secret detection into CI/CD pipelines.
• Working knowledge of containerization and a major cloud platform (Azure preferred).
• Must be able to work full-time onsite.
• Applicants must be legally authorized to work in the United States. Cleveland-Cliffs does not provide sponsorship for this position.

Responsibilities

• Consolidate source control and CI/CD onto GitHub.
• Migrate repositories and set standards, branching strategy, and governance.
• Champion Secure SDLC.
• Integrate SAST, DAST, dependency scanning, secret detection into every pipeline.
• Build the automation and the platform.
• Design CI/CD pipelines using GitHub Actions.
• Author build and deployment automation in NodeJS and C#; administer DevOps infra, container registries, and cloud services.
• Coach developers and build reusable patterns for secure-by-default practices.
• Program goals in year one: consolidation and Secure SDLC foundation; year two: expand to AI/ML pipeline security.
• Potential growth opportunities include Architect/Principal or leadership path.
• Other duties as assigned.

Skills

DevOps

DevSecOps

Platform engineering

NodeJS

C#

Python

Git

GitHub

GitHub Actions

CI/CD pipelines

SAST/DAST integration

Containerization

Azure

Security focus

Education

Bachelor's degree in Computer Science, Information Technology, or related field

Tools

Terraform

ARM templates

Job description

Location: Cleveland, OH

Summary Of Responsibilities

• Consolidate source control and CI/CD onto GitHub.
• Partner with application development teams to migrate repositories, and set the standards, branching strategy, and governance that make the consolidation durable
• Champion Secure SDLC.
• Integrate SAST, DAST, dependency scanning, secret detection, and code scanning into every pipeline, drive adoption, not just deployment
• Build the automation and the platform
• Design CI/CD pipelines using GitHub Actions
• Author build and deployment automation in NodeJS and C#. Administer DevOps infrastructure, container registries, and cloud platform services
• Coach developers and build the paved road
• Create the templates and reusable patterns that make secure-by-default the easy path. Go hands-on where it accelerates the change
• Program goal in year one (1) is consolidation and Secure SDLC foundation.
• Year two (2) and beyond, the scope expands to include a voice in AI/ML pipeline security as Cleveland-Cliffs' AI footprint grows.
• Potential professional growth opportunities include either a technical path such as Architect and Principal, or a leadership path by managing a team as the program grows.
• Other duties as assigned.

Minimum Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field, or equivalent work experience
• 6+ years in DevOps, DevSecOps, or platform engineering
• Hands-on experience with repository and CI/CD platform consolidations or migrations
• Strong scripting and programming skills in NodeJS and C# (Python also valued
• Deep proficiency with Git, GitHub, and GitHub Actions
• Experience integrating SAST, DAST, dependency scanning, and secret detection into CI/CD pipelines
• Working knowledge of containerization and a major cloud platform (Azure preferred)
• Other duties as assigned
• Must be able to work full-time onsite
• Applicants must be legally authorized to work in the United States. Cleveland-Cliffs does not provide sponsorship for this position.

Preferred Qualifications

• Experience consolidating from Azure DevOps, GitLab, Jenkins, or TFS into GitHub
• Familiarity with .NET applications and legacy application environments
• Interest or experience in AI/ML pipeline security
• Experience with Infrastructure as Code (Terraform, ARM, or similar) Relevant certifications (AZ-400, GIAC GWEB/GCSA, or similar)

The salary range for this role is $120,000 $160,000, plus meaningful annual bonus opportunity tied to company and individual performance. An employee's pay within the salary range will be based on numerous factors, including, but not limited to, relevant education, qualifications, experience, skills, geographic location, and business or organizational needs.

Cleveland-Cliffs is a leading North America-based steel producer with focus on value-added sheet products, particularly for the automotive industry. The Company is vertically integrated from the mining of iron ore, production of pellets and direct reduced iron, and processing of ferrous scrap through primary steelmaking and downstream finishing, stamping, tooling, and tubing. We offer an excellent total compensation package, including competitive pay with variable compensation opportunity, health insurance, retirement plan, education assistance, paid time off, and more.

Cleveland-Cliffs Inc. is committed to working with and providing reasonable accommodation to individuals with disabilities.

Cleveland-Cliffs Inc. is an equal opportunity employer – M/F/Veteran/Disability. We are a drug-free workplace and conduct pre-employment screening as a condition of employment.