Remote DevSecOps Engineer: Secure CI/CD & Cloud Automation

Serco; City of Albany (NY); Remote; USD 120,000 - 180,000; Full time

Job summary

Serco is seeking a seasoned DevSecOps Engineer for a 100% remote role. You will design and secure CI/CD pipelines, integrate SAST/DAST and container scanning, and collaborate across teams to deliver secure software.

Strong Azure skills and scripting are required, with DoD clearance potential and CONUS travel up to 10%. The position emphasizes Infrastructure as Code, incident response, and threat modeling as part of a mature security-focused DevOps culture.

Qualifications

• U.S. Citizenship is required.
• Ability to obtain DoW Secret security clearance.
• Bachelor’s degree in a relevant field.
• Minimum 2 years of DevOps, Security Engineering, Software Engineering, or Cloud Engineering
• Proficiency with Azure.
• Experience with CI/CD tools: Jenkins, GitLab CI, or GitHub Actions.
• Familiarity with Docker and Kubernetes.
• Strong scripting skills.
• Travel up to 10% (CONUS).

Responsibilities

• Design, implement, and maintain secure CI/CD pipelines.
• Integrate security tools into development workflow (SAST, DAST, container scanning).
• Collaborate with cross-functional teams to deliver secure software.
• Automate infrastructure provisioning with IaC (Terraform, CloudFormation).
• Monitor for vulnerabilities and respond to incidents.
• Conduct threat modeling and risk assessments.
• Stay current with emerging threats and best practices.

Skills

CI/CD

DevSecOps

Cloud Security

Scripting

Security Tools

Education

Bachelor's degree

Tools

Jenkins

GitLab CI

GitHub Actions

Terraform

CloudFormation

Job description

Serco is seeking a seasoned DevSecOps Engineer for a 100% remote role. You will design and secure CI/CD pipelines, integrate SAST/DAST and container scanning, and collaborate across teams to deliver secure software.

Strong Azure skills and scripting are required, with DoD clearance potential and CONUS travel up to 10%. The position emphasizes Infrastructure as Code, incident response, and threat modeling as part of a mature security-focused DevOps culture.