Senior DevSecOps Engineer - Secure Azure & Automation

Praxis, Inc.; United States; On-site; USD 140,000 - 210,000; Full time

Job summary

Virtuous is seeking a Senior DevSecOps Engineer to fortify security across our products, cloud infrastructure, and software delivery ecosystem. You will work with Engineering, Cloud Engineering, DevOps, Architecture, and Security to embed security into design, development, deployment, and operations.

This role blends coding, automation, and engineering to reduce security debt, modernize practices, and enable secure-by-default workflows.

Qualifications

• 5+ years in Security Engineering, Application Security, Cloud Security, DevSecOps in cloud-native SaaS.
• Strong Azure design, governance, RBAC/PIM and secure connectivity patterns.
• Secure SDLC, threat modeling, CI/CD security controls, and engineering partnership.
• Hands-on DevSecOps with SAST, DAST, dependency scanning, secrets management, and software supply-chain security.
• Kubernetes, Docker, container security, IaC, and cloud-native platforms.
• Experience with GitHub, GitHub Actions, GitHub Advanced Security, SIEM, and observability tech.

Responsibilities

• Design, implement, and improve secure Azure cloud architectures and governance.
• Strengthen cloud security posture with RBAC/PIM, Azure Policy, and guardrails.
• Improve security visibility via logging, monitoring, SIEM integrations, and tooling.
• Remediate cloud security risks, configuration drift, and operational gaps.
• Embed security into engineering workflows with secure-by-default patterns and automation.
• Lead threat modeling and secure design discussions across teams.

Skills

Azure security

DevSecOps

Kubernetes

Docker

CI/CD security

GitHub Actions

Automation

Security tooling

Tools

GitHub

GitHub Actions

SIEM

Job description

Virtuous is seeking a Senior DevSecOps Engineer to fortify security across our products, cloud infrastructure, and software delivery ecosystem. You will work with Engineering, Cloud Engineering, DevOps, Architecture, and Security to embed security into design, development, deployment, and operations.

This role blends coding, automation, and engineering to reduce security debt, modernize practices, and enable secure-by-default workflows.