Senior DevSecOps Engineer: GitHub CI/CD & Secure SDLC

aksteel; United States; On-site; USD 120,000 - 160,000; Full time

Job summary

Cleveland-Cliffs is seeking a Senior DevSecOps/Platform Engineer to consolidate source control and CI/CD on GitHub in Cleveland, OH. You will partner with development teams to migrate repositories, establish standards, and govern branching strategies while championing Secure SDLC practices.

Responsibilities include integrating SAST/DAST and secret detection into pipelines, designing GitHub Actions pipelines, and building automation across the platform.

Qualifications

• Bachelor's degree in Computer Science, IT, or related field, or equivalent work experience.
• 6+ years in DevOps, DevSecOps, or platform engineering.
• Hands-on experience consolidating or migrating repositories/CI/CD.
• Strong scripting and programming in NodeJS and C#.
• Deep proficiency with Git, GitHub, and GitHub Actions.
• Experience integrating SAST, DAST into CI/CD pipelines.
• Working knowledge of containerization and Azure cloud.
• Must be able to work full-time onsite; US work authorization.

Responsibilities

• Consolidate source control and CI/CD onto GitHub.
• Partner with application teams to migrate repositories and set standards, branching and governance.
• Champion Secure SDLC and integrate security tooling into pipelines.
• Design CI/CD pipelines using GitHub Actions.
• Author build and deployment automation in NodeJS and C#.
• Administer DevOps infrastructure, containers, and cloud services.
• Coach developers and create reusable secure-by-default templates.
• Program goals: consolidate, build Secure SDLC foundation; grow into AI/ML pipeline security.

Skills

DevSecOps

GitHub

CI/CD

NodeJS

C#

Azure

SAST

DAST

Education

Bachelor's degree in CS/IT or related field

Tools

GitHub Actions

Terraform

Job description

Cleveland-Cliffs is seeking a Senior DevSecOps/Platform Engineer to consolidate source control and CI/CD on GitHub in Cleveland, OH. You will partner with development teams to migrate repositories, establish standards, and govern branching strategies while championing Secure SDLC practices.

Responsibilities include integrating SAST/DAST and secret detection into pipelines, designing GitHub Actions pipelines, and building automation across the platform.