Senior DevSecOps Engineer: Secure SDLC & GitHub CI/CD

Cleveland-Cliffs; Cleveland (OH); On-site; USD 120,000 - 160,000; Full time

Job summary

Cleveland-Cliffs is seeking an experienced DevOps/DevSecOps professional to consolidate source control and CI/CD onto GitHub, and to champion a Secure SDLC across pipelines and teams. You will integrate SAST/DAST, enable automation, and design pipelines with GitHub Actions in a on-site Cleveland, OH setting.

The role emphasizes hands-on engineering of CI/CD, cloud and container platforms, with focus on secure, scalable automation and coaching developers toward secure-by-default practices.

Qualifications

• Bachelor’s degree in Computer Science, IT, or related field, or equivalent work experience.
• 6+ years in DevOps, DevSecOps, or platform engineering.
• Hands-on experience with repository and CI/CD consolidations or migrations.
• Strong scripting and programming skills in NodeJS and C# (Python also valued).
• Deep proficiency with Git, GitHub, and GitHub Actions.
• Experience integrating SAST, DAST, dependency scanning, and secret detection into CI/CD pipelines.
• Working knowledge of containerization and a major cloud platform (Azure preferred).
• Must be able to work full-time onsite.
• Applicants must be legally authorized to work in the United States. Cleveland-Cliffs does not provide sponsorship for this position.

Responsibilities

• Consolidate source control and CI/CD onto GitHub.
• Migrate repositories and set standards, branching strategy, and governance.
• Champion Secure SDLC.
• Integrate SAST, DAST, dependency scanning, secret detection into every pipeline.
• Build the automation and the platform.
• Design CI/CD pipelines using GitHub Actions.
• Author build and deployment automation in NodeJS and C#; administer DevOps infra, container registries, and cloud services.
• Coach developers and build reusable patterns for secure-by-default practices.
• Program goals in year one: consolidation and Secure SDLC foundation; year two: expand to AI/ML pipeline security.
• Potential growth opportunities include Architect/Principal or leadership path.
• Other duties as assigned.

Skills

DevOps

DevSecOps

Platform engineering

NodeJS

C#

Python

Git

GitHub

GitHub Actions

CI/CD pipelines

SAST/DAST integration

Containerization

Azure

Security focus

Education

Bachelor's degree in Computer Science, Information Technology, or related field

Tools

Terraform

ARM templates

Job description

Cleveland-Cliffs is seeking an experienced DevOps/DevSecOps professional to consolidate source control and CI/CD onto GitHub, and to champion a Secure SDLC across pipelines and teams. You will integrate SAST/DAST, enable automation, and design pipelines with GitHub Actions in a on-site Cleveland, OH setting.

The role emphasizes hands-on engineering of CI/CD, cloud and container platforms, with focus on secure, scalable automation and coaching developers toward secure-by-default practices.