Remote DevSecOps Engineer: Build Secure CI/CD Pipelines

Serco; Olympia (WA); Remote; USD 140,000 - 190,000; Full time

Job summary

Serco is seeking an Experienced DevSecOps Engineer to join our team in a 100% remote role. The ideal candidate will weave security into the DevOps lifecycle, with strong Azure and cloud automation skills, and experience in CI/CD pipelines, IaC, and vulnerability management.

You will collaborate across development, operations, and security to deliver secure software, perform threat modeling, stay current on threats, and support DoD/DoW security clearance requirements as needed.

Qualifications

• Bachelor’s degree required.
• Minimum 5 years of experience in DevOps, Security Engineering, Software Engineering, or Cloud Engineering.
• Proficiency with Azure.
• Experience with CI/CD tools: Jenkins, GitLab CI, GitHub Actions.
• Familiarity with containerization/orchestration: Docker, Kubernetes.

Responsibilities

• Design, implement, and maintain secure CI/CD pipelines.
• Integrate security tools into development and deployment workflows (SAST, DAST, container scanning).
• Collaborate with development, operations, and security teams to ensure secure software delivery.
• Automate infrastructure provisioning with IaC tools (Terraform or CloudFormation).
• Monitor systems for security vulnerabilities and respond to incidents.
• Conduct threat modeling and risk assessments for new and existing systems.

Skills

CI/CD design

Scripting

Threat modeling

Security engineering

Cloud engineering

Team collaboration

Education

Bachelor’s degree

Tools

Jenkins

GitLab CI

GitHub Actions

Terraform

CloudFormation

Docker

Kubernetes

Azure

Job description

Serco is seeking an Experienced DevSecOps Engineer to join our team in a 100% remote role. The ideal candidate will weave security into the DevOps lifecycle, with strong Azure and cloud automation skills, and experience in CI/CD pipelines, IaC, and vulnerability management.

You will collaborate across development, operations, and security to deliver secure software, perform threat modeling, stay current on threats, and support DoD/DoW security clearance requirements as needed.