Senior DevSecOps Engineer: Secure Cloud & CI/CD Expert

NextEra Energy Resources; Saint Paul (MN); In loco; USD 110.000 - 164.000; Tempo pieno

Descrizione del lavoro

NextEra Energy Resources is seeking a Senior DevSecOps Engineer to embed security throughout the software development lifecycle and strengthen security of cloud platforms, pipelines, and the software supply chain in Saint Paul, MN.

You will partner with engineering, cloud, governance, and cybersecurity teams to implement secure-by-default patterns and measurable controls across traditional and AI-assisted development environments.

Competenze

• Bachelor’s degree or equivalent practical experience.
• 7+ years of experience in DevSecOps, application security, cloud security, platform engineering, or related technical discipline.
• Hands-on experience securing enterprise CI/CD pipelines and software development workflows.
• Experience with SAST, SCA, DAST, secret scanning, IaC scanning, and container/image scanning.
• Strong knowledge of SBOMs, artifact signing, software provenance, dependency governance, and SLSA-aligned practices.
• Experience with cloud security controls across AWS/GCP.

Mansioni

• Drives automation and continuous improvement of the software delivery process.
• Maintains CI/CD services and configuration for developers.
• Leads automated deployment of software builds to test and production environments.
• Monitors system health and communicates with stakeholders.
• Evaluates and automates repetitive security processes to reduce toil.

Conoscenze

DevSecOps

Application Security

Cloud Security

Platform Engineering

Software Engineering

Threat Modeling

SAST

SCA

DAST

SBOMs

Formazione

Bachelor’s degree or equivalent practical experience

Strumenti

Terraform

Open Policy Agent

Kubernetes

AWS

GCP

Descrizione del lavoro

NextEra Energy Resources is seeking a Senior DevSecOps Engineer to embed security throughout the software development lifecycle and strengthen security of cloud platforms, pipelines, and the software supply chain in Saint Paul, MN.

You will partner with engineering, cloud, governance, and cybersecurity teams to implement secure-by-default patterns and measurable controls across traditional and AI-assisted development environments.