Senior DevSecOps Engineer - Secure CI/CD & Cloud Automation

International Executive Service Corps; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

NuAxis seeks a Senior DevSecOps Engineer to integrate security into CI/CD pipelines, cloud environments, and development workflows. You will own pipeline architecture, automated security gating, and infrastructure-as-code standards.

Responsibilities include SAST/DAST, SCA, container image scanning, secrets management, and IaC provisioning. You will guide teams on secure delivery and shift-left practices while supporting ATO and continuous monitoring.

Qualifications

• Bachelor's degree in IT, CS, or Cybersecurity.
• 5–8 years of DevSecOps/DevOps experience.
• One current certification: AWS Security, Azure Security, CKA, or CompTIA Security+.
• Post-hire certs: CKS or Terraform Associate within 180 days.
• Preferred: CISSP or CDP; AWS/Azure DevOps Engineer Expert.

Responsibilities

• Design, build, and maintain CI/CD pipelines with embedded security gates.
• Implement SAST/DAST, SCA, container and IaC scanning across the toolchain.
• Manage secrets, credentials, certificates, and privileged access.
• Author and maintain infrastructure-as-code for reproducible environments.
• Instrument monitoring, logging, and alerting for visibility.
• Support ATO, continuous monitoring, and security evidence generation.
• Coach development teams on secure delivery and shift-left practices.

Skills

CI/CD security

SAST/DAST

Container security

Secrets management

IaC scanning

Pipeline automation

Cloud security

Shift-left practices

Education

Bachelor's degree in IT/CS/Cybersecurity

Tools

Jenkins

GitHub Actions

GitLab CI

Azure DevOps

Terraform

Ansible

Docker

Kubernetes

Helm

SonarQube

Fortify

Checkmarx

OWASP ZAP

Burp Suite

Snyk

Trivy

Anchore

HashiCorp Vault

AWS Secrets Manager

Job description

NuAxis seeks a Senior DevSecOps Engineer to integrate security into CI/CD pipelines, cloud environments, and development workflows. You will own pipeline architecture, automated security gating, and infrastructure-as-code standards.

Responsibilities include SAST/DAST, SCA, container image scanning, secrets management, and IaC provisioning. You will guide teams on secure delivery and shift-left practices while supporting ATO and continuous monitoring.