Senior DevSecOps Engineer: Secure CI/CD & Self-Service

Capstone IT; United States; On-site; USD 120,000 - 160,000; Full time

Job summary

Capstone IT is helping our client hire a Senior DevSecOps Engineer to modernize software delivery across the enterprise. The role focuses on secure, automated CI/CD pipelines, self-service engineering platforms, and standardized delivery practices adopted across multiple teams.

The ideal candidate has hands-on DevSecOps experience, software supply chain security, CI/CD automation, and familiarity with internal developer platforms. Mentors developers and champions best practices.

Qualifications

• Bachelor's Degree in Computer Science or similar field of study.
• Minimum 10 years of related experience in an enterprise level environment.

Responsibilities

• Design and implement automated CI/CD pipelines with integrated security, quality, and architectural validation.
• Build and maintain immutable deployment pipelines using build-once, promote-through-environments practices.
• Develop self-service capabilities and standardized engineering templates within an internal developer portal.
• Implement software supply chain security including SBOM generation, dependency scanning, license compliance, and artifact repository governance.
• Establish engineering standards and reusable development patterns that improve consistency across teams.
• Develop technology governance and OSS intake processes that balance security with developer productivity.
• Measure engineering effectiveness using DORA metrics and developer platform health indicators.
• Mentor engineering teams and promote adoption of modern software delivery practices.

Skills

DevSecOps

Software supply chain security

Internal developer platforms

Self-service platforms

Immutable deployment

Software engineering

Java familiarity

Education

Bachelor's degree in Computer Science

Tools

Backstage

Job description

Capstone IT is helping our client hire a Senior DevSecOps Engineer to modernize software delivery across the enterprise. The role focuses on secure, automated CI/CD pipelines, self-service engineering platforms, and standardized delivery practices adopted across multiple teams.

The ideal candidate has hands-on DevSecOps experience, software supply chain security, CI/CD automation, and familiarity with internal developer platforms. Mentors developers and champions best practices.