Senior DevSecOps Engineer: Secure CI/CD & Cloud

Harris Computer; Vermont; On-site; USD 130,000 - 140,000; Full time

Benefits offered by this job

Medical, dental, vision benefits

Vacation + personal days

Employee stock ownership (ESOP)

Job summary

STChealth is seeking a DevSecOps Engineer to lead secure CI/CD design, automate security gates, and manage scalable cloud infrastructure. You will mentor teams on secure coding and IaC practices while aligning engineering, security, and operations.

Candidates should have 7+ years in DevOps/DevSecOps with strong scripting and cloud security experience across AWS/Azure/GCP. A collaborative, security-forward culture is emphasized.

Qualifications

• 7+ years of experience in DevOps, DevSecOps, or Infrastructure Engineering with a security focus.
• Experience integrating automated security gates into CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins).
• Strong scripting/automation skills (Python, Bash, Go).
• Proficiency with AWS/Azure/GCP and cloud security tooling (IAM, Security Hub, GuardDuty).
• In-depth knowledge of infrastructure as code tools and SDLC security.

Responsibilities

• Lead the design, implementation, and maintenance of secure CI/CD pipelines with automated SAST/DAST/SCA scanning.
• Architect and harden scalable, compliant cloud infrastructure and orchestrate Kubernetes.
• Mentor teams on secure coding, SDLC, and IaC security practices.
• Stay current on security standards, threats, and best practices and drive adoption across teams.
• Collaborate across engineering, security, and operations to enforce Zero Trust and Least Privilege.

Skills

DevSecOps

CI/CD

Cloud Security

Scripting Python

Cloud Platforms

IaC

Cross-Functional

Security Standards

Education

Bachelor's degree in CS or related

Tools

GitHub Actions

GitLab CI

Jenkins

HashiCorp Vault

AWS IAM

Kubernetes

Job description

STChealth is seeking a DevSecOps Engineer to lead secure CI/CD design, automate security gates, and manage scalable cloud infrastructure. You will mentor teams on secure coding and IaC practices while aligning engineering, security, and operations.

Candidates should have 7+ years in DevOps/DevSecOps with strong scripting and cloud security experience across AWS/Azure/GCP. A collaborative, security-forward culture is emphasized.