Remote DevSecOps Engineer: Secure CI/CD & Cloud Automation

Serco; Concord (NH); Remote; USD 120,000 - 180,000; Full time

Job summary

Serco Inc. (Serco) seeks an Experienced DevSecOps Engineer to join our remote team. The role focuses on embedding security into the DevOps lifecycle and cloud infrastructure automation across CI/CD pipelines.

Responsibilities include designing secure pipelines, integrating SAST/DAST, IaC with Terraform or CloudFormation, and thwarting threats through proactive monitoring and incident response. 10% CONUS travel may be required.

Qualifications

• Minimum 5 years of experience in DevOps, Security Engineering, Software Engineering, or Cloud Engineering
• U.S. Citizenship required
• Proficiency with Azure
• Experience with CI/CD tools: Jenkins, GitLab CI, GitHub Actions
• Familiarity with Docker and Kubernetes
• Willingness to travel up to 10% (CONUS)

Responsibilities

• Design, implement, and maintain secure CI/CD pipelines.
• Integrate security tools and practices into development and deployment workflows (SAST, DAST, container scanning).
• Collaborate with development, operations, and security teams to ensure secure software delivery.
• Automate infrastructure provisioning and configuration using IaC tools such as Terraform or CloudFormation.
• Monitor systems for security vulnerabilities and respond to incidents.
• Conduct threat modeling and risk assessments for new and existing systems.
• Stay current with emerging security threats, technologies, and best practices.

Skills

CI/CD pipelines

Scripting

Security engineering

Cloud engineering

DevOps

Threat modeling

Incident response

Azure

Education

Bachelor’s degree

Tools

Jenkins

GitLab CI

GitHub Actions

Terraform

CloudFormation

Docker

Kubernetes

Azure

Job description

Serco Inc. (Serco) seeks an Experienced DevSecOps Engineer to join our remote team. The role focuses on embedding security into the DevOps lifecycle and cloud infrastructure automation across CI/CD pipelines.

Responsibilities include designing secure pipelines, integrating SAST/DAST, IaC with Terraform or CloudFormation, and thwarting threats through proactive monitoring and incident response. 10% CONUS travel may be required.