Senior DevSecOps Engineer (Azure)

The Judge Group; Chicago (IL); On-site; USD 150,000 - 190,000; Full time

Job summary

The Judge Group seeks a Senior DevSecOps Engineer to build and secure a cloud-native compliance evidencing platform on Azure. The role focuses on immutable storage, cryptographic integrity, and scalable retrieval to support governance, risk, and compliance workflows.

You will design secure ingestion APIs, build event-driven workflows, implement encryption, and manage infrastructure with Terraform and modern CI/CD practices in Chicago, IL.

Qualifications

• 5+ years designing and supporting production workloads in Azure.
• Experience with Azure API Management, Functions, Service Bus, Cosmos DB, and Storage.
• Experience building event-driven and API-first architectures.

Responsibilities

• Design secure API ingestion solutions using Azure APIM.
• Build event-driven workflows with Azure Functions and Service Bus.
• Implement immutable storage using Azure Blob Storage (WORM) and Cosmos DB.
• Architect secure caching with Azure Cache for Redis.
• Manage encryption and key lifecycle with Azure Key Vault.
• Develop monitoring, logging, and audit telemetry with Azure Monitor/Log Analytics.
• Provision and manage infrastructure with Terraform and CI/CD pipelines.
• Integrate third-party platforms and APIs for evidence collection.
• Collaborate with engineering, security, and compliance teams for reliability and regulatory alignment.

Skills

Azure expertise

IaC (Terraform)

Python/Node.js

Security engineering

Stakeholder comms

Education

Bachelor's degree in CS or related field

Tools

Terraform

Azure

CI/CD (GitHub/DevOps)

Job description

We are seeking a Senior DevSecOps Engineer to help build and secure a cloud-native compliance evidencing platform on Azure. This platform will ingest, store, and manage audit and compliance artifacts with immutable storage, cryptographic integrity, and scalable retrieval capabilities to support governance, risk, and compliance workflows.

Responsibilities

• Design secure API ingestion solutions using Azure API Management (APIM).
• Build event-driven workflows with Azure Functions and Azure Service Bus.
• Implement immutable storage using Azure Blob Storage (WORM) and Cosmos DB.
• Architect secure caching solutions using Azure Cache for Redis.
• Manage encryption and key lifecycle processes with Azure Key Vault.
• Develop monitoring, logging, and audit telemetry using Azure Monitor and Log Analytics.
• Provision and manage infrastructure using Terraform and CI/CD pipelines.
• Integrate third-party platforms and APIs for automated evidence collection.
• Collaborate with engineering, security, and compliance teams to ensure platform reliability and regulatory alignment.

Minimum Qualifications

• 5+ years of experience designing and supporting production workloads in Azure.
• Strong experience with Azure API Management, Azure Functions, Service Bus, Cosmos DB, and Azure Storage.
• Experience building event-driven and API-first architectures.
• Proficiency in Terraform and infrastructure-as-code practices.
• Strong programming skills in Python and/or Node.js.
• Experience with encryption, secrets management, and Azure Key Vault.
• Experience integrating enterprise applications through APIs.
• Strong communication and stakeholder management skills.

Preferred Qualifications

• Experience supporting PCI-DSS, SOX, GLBA, or similar regulated environments.
• Knowledge of zero-trust networking, Private Endpoints, VNets, and NSGs.
• Experience with Kusto Query Language (KQL) and operational monitoring.
• Familiarity with GitHub Actions or Azure DevOps CI/CD pipelines.
• Relevant certifications such as Azure Security Engineer Associate, CISSP, CCSP, or AWS Security Specialty.
• Bachelor's degree in Computer Science, Information Systems, or a related field.