Senior DevSecOps Engineer: Cloud Security & CI/CD Leader

Glocomms; United States; On-site; USD 140,000 - 210,000; Full time

Job summary

Glocomms partnered with a leading power and energy firm to identify a Senior DevSecOps Engineer to support secure, scalable cloud and application platforms. You will embed security into the software delivery lifecycle and drive automation across Azure and AWS.

Key responsibilities include building secure CI/CD pipelines, implementing SAST/DAST/SCA, managing IAM, CSPM, and container/Kubernetes security, and fostering a security-first culture across cross-functional teams.

Qualifications

• Bachelor's degree in a related field with hands-on experience.
• Strong scripting experience (Python, PowerShell, Bash, or Go).
• Experience building and maintaining CI/CD pipelines (GitHub, Azure DevOps).
• Experience with Infrastructure as Code (IaC) and secure deployment workflows.
• Experience securing containerized and Kubernetes environments.
• Strong cloud experience across Azure and AWS.
• Solid understanding of identity and access management.
• Experience supporting SOC 2 Type II and/or ISO 27001 controls.
• Strong documentation skills with ability to support audits and compliance.

Responsibilities

• Own and evolve the organization's DevSecOps strategy.
• Design, implement, and maintain security controls across cloud-native environments (Azure and AWS).
• Build and enhance CI/CD pipelines with security automation and reliability (GitHub Actions, GitHub Enterprise, Azure DevOps).
• Lead the implementation of application security testing practices (SAST, DAST, SCA).
• Drive vulnerability management and remediation with engineering teams.
• Develop and maintain IaC and support GitOps workflows for automated deployments.
• Strengthen container and Kubernetes security with image scanning and runtime protections.
• Implement CSPM solutions to monitor and improve cloud configurations.
• Oversee IAM across platforms including Microsoft Entra ID and related tooling.
• Support detection and response initiatives, integrating security telemetry into tools like Defender.
• Automate security processes using Python, PowerShell, Bash, or Go.
• Partner with cross-functional teams for code and architecture reviews and security tooling evaluations.
• Contribute to secure engineering practices and developer workflow optimization.

Skills

DevSecOps

Security in SDLC

CI/CD automation

Cloud security architectures

Scripting (Python/PowerShell/Bash/Go)

IAM

SOC 2 / ISO 27001

Audits & compliance

Container/Kubernetes security

IaC and GitOps

Education

Bachelor's degree in related field

Tools

GitHub Actions

GitHub Enterprise

Azure DevOps

Job description

Glocomms partnered with a leading power and energy firm to identify a Senior DevSecOps Engineer to support secure, scalable cloud and application platforms. You will embed security into the software delivery lifecycle and drive automation across Azure and AWS.

Key responsibilities include building secure CI/CD pipelines, implementing SAST/DAST/SCA, managing IAM, CSPM, and container/Kubernetes security, and fostering a security-first culture across cross-functional teams.