Senior DevSecOps Engineer — Remote

Serco; Madison (WI); Remote; USD 130,000 - 180,000; Full time

Job summary

Serco is seeking an Experienced DevSecOps Engineer for a 100% remote role. The candidate will embed security into the SDLC, design secure CI/CD pipelines, and automate infrastructure with IaC tools like Terraform or CloudFormation. Strong scripting, Azure proficiency, and experience with Docker/Kubernetes are essential.

You will collaborate across teams to deliver secure software, conduct threat modeling, and stay current with security practices. U.S.

Qualifications

• U.S. Citizenship required.
• Ability to obtain DoW Secret security clearance.
• Bachelor’s degree or equivalent in a technical field.
• Minimum 5 years of experience in DevOps, Security/Software/Cloud engineering.
• Proficiency with Azure.
• Experience with CI/CD tools (Jenkins, GitLab CI, GitHub Actions).
• Familiarity with Docker and Kubernetes.
• Strong scripting skills.

Responsibilities

• Design, implement, and maintain secure CI/CD pipelines.
• Integrate security tooling into development and deployment workflows (SAST, DAST, container scanning).
• Collaborate with development, operations, and security teams to ensure secure software delivery.
• Automate infrastructure provisioning with IaC tools (Terraform, CloudFormation).
• Monitor for vulnerabilities and respond to incidents.
• Conduct threat modeling and risk assessments for systems.

Skills

DevSecOps

Cloud infra

CI/CD pipelines

Security tooling

SAST/DAST

Azure

Docker

Kubernetes

GitHub Actions

GitLab CI

Jenkins

Scripting

Education

Bachelor's degree

Tools

Terraform

CloudFormation

Job description

Serco is seeking an Experienced DevSecOps Engineer for a 100% remote role. The candidate will embed security into the SDLC, design secure CI/CD pipelines, and automate infrastructure with IaC tools like Terraform or CloudFormation. Strong scripting, Azure proficiency, and experience with Docker/Kubernetes are essential.

You will collaborate across teams to deliver secure software, conduct threat modeling, and stay current with security practices. U.S.