Senior DevSecOps Engineer

Apex Systems; Chicago (IL); Hybrid; USD 96,000 - 120,000; Full time

Benefits offered by this job

ESPP

401K with company match

HSA (HDHP)

Professional certifications discounts

Career coaching

Job summary

Apex Systems in Chicago, IL is seeking a Senior DevSecOps Engineer to design, build, and harden a cloud-native platform for compliance artifacts on Azure.

You will implement API ingestion pipelines, event-driven workflows, and immutable storage with WORM, Key Vault, and Cosmos DB, while enabling governance and audit capabilities for audit workloads.

Qualifications

• 5+ years building Azure-based production workloads.
• Experience with immutable/append-only storage patterns.
• Strong API-first and event-driven design experience.
• Proven ability to implement encryption key lifecycle with Key Vault.
• Familiarity with PCI-DSS, SOX, GLBA controls.

Responsibilities

• Design API ingestion pipelines using APIM with OAuth2/JWT validation.
• Build event-driven ingestion with Service Bus and Functions.
• Implement immutable storage with WORM and CosmosDB metadata.
• Architect Redis for high-throughput queries.
• Create Terraform IaC for all resources.
• Integrate third-party tools via APIs for evidence ingestion.

Skills

Azure APIM

CosmosDB

Terraform

Python

Node.js

Zero-trust

KQL

API integrations

Education

Bachelor's degree in Computer Science or related field

Tools

Azure Blob Storage

Azure Service Bus

Azure Functions

Key Vault

Redis Cache

Log Analytics

Job description

# Senior DevSecOps EngineerApply**Job#: 3044722****Job Description:**Senior DevSecOps Engineer**Location:** Chicago, Illinois (Partial Remote)Role OverviewWe are seeking a Senior DevSecOps Engineer to help design, build, and harden a cloud-native immutable evidencing platform. This platform is built to ingest compliance artifacts, audit evidence, and control attestations from various internal tools. The role involves ensuring the platform, built on Azure, aligns with PCI-DSS, SOX, and GLBA requirements by storing data with cryptographic integrity and exposing capabilities to GRC and audit workflows.Key Responsibilities* Design and implement API ingestion pipelines via Azure API Management (APIM) with OAuth2/JWT validation, rate limiting, and schema enforcement.* Build event-driven ingestion workflows using Azure Service Bus and Azure Functions.* Implement immutable artifact storage using Azure Blob Storage with WORM policies and Azure Cosmos DB for metadata indexing.* Architect Redis Cache for high-throughput query caching.* Integrate Azure Key Vault for envelope encryption of stored artifacts, including customer-managed keys and automated rotation.* Build Log Analytics Workspace telemetry pipelines for ingestion events, access audits, and integrity logs.* Write Terraform Infrastructure as Code (IaC) for all infrastructure resources.* Implement third-party tool integrations via APIs to ingest evidence artifacts.Required Qualifications**Experience:** 5+ years building production workloads on Azure, with demonstrated experience in event-driven and API-first architectures. Experience with immutable/append-only storage patterns is required.**Technical Skills:*** Strong experience with Azure API Management (APIM), including policies, backends, and versioning.* Proficiency in deploying and managing NoSQL and CosmosDB databases.* Solid Terraform skills, including modules, remote state, and CI/CD integration.* Strong coding experience in Python and Node.* Familiarity with envelope encryption patterns using Key Vault.* Understanding of zero-trust network design (Private Endpoints, VNet integration, NSG/UDR).* Ability to write KQL for operational queries, alerting, and audit log analysis.* Experience integrating with third-party tool APIs.* Hands-on proficiency with integrated testing tools.* Effective written and verbal communication skills.**Education:** A degree in Computer Science, Information Management, or a related field is preferred.Preferred Qualifications* Azure Security Engineer Associate certification.* AWS Certified Security – Specialty certification.* CISSP or CCSP certification. *Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRateds Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.**Everforth Apex uses a virtual recruiter as part of the application process. Click here for more details. By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from Everforth Apex and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at https://www.apexsystems.com/privacy-policy**Everforth Apex Benefits Overview: Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Everforth Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Everforth Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our ‘Welcome Packet’ as well, which an Everforth Apex team member can provide.**Everforth Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Everforth Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law.**If you require an accommodation under the Americans with Disabilities Act to participate in an interview with a virtual recruiter or to use our website for a search or application, please contact our Benefits Department at [e-mail] or 804-523-8228. Please note that this contact information is strictly to be used for medical ADA accommodations and that no other inquiries will be answered.**UnitedHealthcare creates and publishes the Transparency in Coverage Machine-Readable Files on behalf of Everforth Apex Systems.***Employee Type:** Contract**Location:** Chicago, IL, US**Job Type:****Date Posted:** August 3, 2026**Pay Range:** $70 - $87 per hour