Senior DevSecOps Engineer: Secure Cloud & CI/CD

NextEra Energy, Inc.; Saint Paul (MN); On-site; USD 110,000 - 164,000; Full time

Benefits offered by this job

Relocation Provided

Benefits package

Job summary

NextEra Energy, Inc. seeks a Senior DevSecOps Engineer to embed security across the software lifecycle and strengthen cloud platforms, pipelines, and the software supply chain.

You will partner with software, cloud, governance, and security teams to implement scalable, secure-by-default patterns and measurable controls in both traditional and AI-assisted development environments. You will drive threat modeling, secure design reviews, and governance for AI tools, while enabling developers with

Qualifications

• Bachelor’s degree or equivalent practical experience in a technical field.
• 7+ years of experience in DevSecOps, application security, cloud security, or related discipline.
• Hands-on experience designing and securing enterprise CI/CD pipelines and software development workflows.
• Experience with SAST, SCA, DAST, secret scanning, IaC scanning, and container or image scanning.
• Strong knowledge of software supply chain security (SBOMs, artifact signing, provenance, governance, and SLSA).
• Experience implementing cloud security controls across AWS/GCP or equivalents.
• Experience with infrastructure-as-code and policy-as-code tools (Terraform, OPA).
• Strong IAM, least privilege, network segmentation, logging, secrets management, and cloud-native security architecture.
• Experience governing AI coding assistants, autonomous development agents, or AI-generated code.
• Proven collaboration across security, engineering, risk, and platform teams.
• Excellent written and verbal communication.

Responsibilities

• Drives automation and continuous improvement of the software delivery process.
• Maintains and secures CI/CD pipelines with automated security gates (SAST, SCA, DAST, secret scanning, IaC, container scanning).
• Tunes security tooling using risk-based prioritization to minimize false positives and friction.
• Leads threat modeling and secure design reviews early in development.
• Promotes architectural improvements and secure-by-default patterns.
• Develops reusable pipeline templates and hardened base images for secure development.
• Establishes governance for AI coding assistants and AI-generated code.
• Implements least-access models, review requirements, and artifact provenance for tool integrations.
• Implements security controls across AWS and GCP environments.
• Establishes SBOMs, dependency governance, artifact signing, and software provenance per SLSA.

Skills

DevSecOps

Application security

Cloud security

Platform engineering

Software engineering

SAST

SCA

DAST

Secret scanning

IaC scanning

Container scanning

SBOMs

Artifact signing

Software provenance

Dependency governance

SLSA

Terraform

Open Policy Agent

IAM

Least privilege

AI security

Agent tool integrations

Education

Bachelor’s degree in Computer Science, Cybersecurity, Engineering, Information Technology, or equivalent practical experience

Tools

Terraform

Open Policy Agent

Job description

NextEra Energy, Inc. seeks a Senior DevSecOps Engineer to embed security across the software lifecycle and strengthen cloud platforms, pipelines, and the software supply chain.

You will partner with software, cloud, governance, and security teams to implement scalable, secure-by-default patterns and measurable controls in both traditional and AI-assisted development environments. You will drive threat modeling, secure design reviews, and governance for AI tools, while enabling developers with