Remote DevSecOps Engineer: Secure Cloud Automation

Quiet Capital; United States; On-site; USD 96,000 - 130,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

401(k) match

Job summary

Paylocity, a leading cloud-based HR and payroll provider, is hiring a DevSecOps Engineer. You will guide internal teams on secure software practices and maintain security tooling, while integrating security into the CI/CD pipeline and advocating architecture improvements.

Ideal candidates have 3+ years in full-stack web development, strong Python skills, and familiarity with SSO, security tooling, and cloud-based security. Remote role with US-wide eligibility and competitive benefits.

Qualifications

• Bachelor's degree in InfoSec, Computer Science, Engineering, or related field, or equivalent practical experience.
• Minimum 3 years’ experience with full-stack web development.
• Experience developing and working with Web APIs.
• Experience with scaling secure-by-design security solutions for developers.
• Experience interpreting results from Static Code Scanning tools and third party dependency scanning tools
• Strong knowledge of Security Token Services, Federated Identity Providers, SAML 2.0, claims-based security and other SSO technologies.
• Experience in remediating security vulnerabilities beyond OWASP Top 10.
• Experience in assessing security of native and hybrid mobile applications beyond the use of automated tools.
• Strong experience developing in Python.
• Experience developing in .NET is a plus.
• Functional knowledge of container-based application infrastructure with Docker is a plus.
• Experience working with Payroll, HR, Time & Labor Management, and Online Benefits Enrollment applications is a plus.
• Experience with Privileged Access Management and/or Secrets Management is a plus.

Responsibilities

• Develop and maintain internal application security tooling.
• Integrate security into the build/deployment process.
• Promote a proactive approach to addressing the changing threat landscape by recommending and implementing architectural improvements to security infrastructure.
• Provide expert guidance and recommendations for strategic and tactical security architecture topics through risk advisory services.
• Assist developers in remediating vulnerabilities by providing line-by-line guidance.
• Provide training and education to developers on software security best practices in various cloud-based systems.

Skills

Full-stack web development

Web APIs

Security architecture

Python development

SSO technologies (SAML, tokens)

Education

Bachelor's degree in InfoSec, CS, Eng, or related field

Equivalent practical experience

Tools

Docker

Static/Dynamic code analysis tools

Identity/SSO tooling

Cloud security tooling

Job description

Paylocity, a leading cloud-based HR and payroll provider, is hiring a DevSecOps Engineer. You will guide internal teams on secure software practices and maintain security tooling, while integrating security into the CI/CD pipeline and advocating architecture improvements.

Ideal candidates have 3+ years in full-stack web development, strong Python skills, and familiarity with SSO, security tooling, and cloud-based security. Remote role with US-wide eligibility and competitive benefits.