Senior DevSecOps Lead: GitHub CI/CD & Secure SDLC

Cleveland--cliffs-1; Cleveland (OH); On-site; USD 120,000 - 160,000; Full time

Job summary

Cleveland-Cliffs Inc. is seeking a Lead IT DevSecOps Engineer in Cleveland, OH to partner with development teams and consolidate source control and CI/CD onto GitHub.

The role embeds Secure SDLC across pipelines and aligns with leadership from Cybersecurity, IT Infrastructure, and Applications. The candidate will drive SAST/DAST integration, build automation in NodeJS and C#, and mentor teams toward secure-by-default workflows.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field, or equivalent work experience.
• 6+ years in DevOps, DevSecOps, or platform engineering.
• Hands-on experience with repository and CI/CD consolidations or migrations.
• Strong scripting and programming skills in NodeJS and C# (Python also valued).
• Deep proficiency with Git, GitHub, and GitHub Actions.
• Experience integrating SAST, DAST, dependency scanning, and secret detection into CI/CD pipelines.

Responsibilities

• Consolidate source control and CI/CD onto GitHub.
• Partner with application development teams to migrate repositories, and set standards, branching strategy, and governance.
• Champion Secure SDLC and integrate security scanning into every pipeline.
• Design CI/CD pipelines using GitHub Actions.
• Build automation and tooling in NodeJS and C#; administer DevOps infrastructure and cloud services.
• Coach developers and create reusable templates to promote secure-by-default practices.

Skills

DevOps

DevSecOps

NodeJS

C#

Git

GitHub Actions

CI/CD

SAST/DAST

Secure SDLC

Education

Bachelor's degree in Computer Science / IT

Tools

Terraform

ARM templates

Azure

Job description

Cleveland-Cliffs Inc. is seeking a Lead IT DevSecOps Engineer in Cleveland, OH to partner with development teams and consolidate source control and CI/CD onto GitHub.

The role embeds Secure SDLC across pipelines and aligns with leadership from Cybersecurity, IT Infrastructure, and Applications. The candidate will drive SAST/DAST integration, build automation in NodeJS and C#, and mentor teams toward secure-by-default workflows.