Senior DevSecOps Engineer: Secure CI/CD & Cloud

Harris Computer; Virginia; On-site; USD 130,000 - 140,000; Full time

Benefits offered by this job

Career growth

Medical benefits

Vacation days

Stock options

Community involvement

Flexible work arrangements

Job summary

STChealth is seeking a DevSecOps Engineer to lead securing our CI/CD pipelines and cloud environments. You will automate security gates, harden infrastructure, and guide teams on secure coding and IaC practices.

You will mentor cross-functional teams in secure development and cloud security while advancing our transformation toward shift-left security and resilient delivery pipelines.

Qualifications

• 7+ years in DevOps/DevSecOps or Infrastructure with a security focus.
• Experience integrating automated security gates into CI/CD pipelines (SAST/DAST/ SCA).
• Experience across major cloud platforms and cloud security tooling.
• Strong scripting/automation in Python, Bash, or Go.
• Excellent cross-team collaboration and communication skills.

Responsibilities

• Lead secure CI/CD design, implementation, and maintenance with automated security checks.
• Architect and harden scalable, compliant cloud infrastructure.
• Manage container security and orchestration (Docker, Kubernetes).
• Monitor emerging security trends and enforce best practices in DevSecOps.
• Mentor teams on secure SDLC practices and IaC security.

Skills

DevSecOps

CI/CD

Cloud security

Scripting

Container security

IAM/Zero Trust

Incident response

Education

Bachelor's degree in CS/Cyber Security/Engineering

Tools

GitHub Actions

GitLab CI

Jenkins

Kubernetes

Terraform

HashiCorp Vault

AWS/GCP/Azure IAM

Security Hub/GuardDuty

Job description

STChealth is seeking a DevSecOps Engineer to lead securing our CI/CD pipelines and cloud environments. You will automate security gates, harden infrastructure, and guide teams on secure coding and IaC practices.

You will mentor cross-functional teams in secure development and cloud security while advancing our transformation toward shift-left security and resilient delivery pipelines.