Senior DevSecOps Lead: Secure SDLC & GitHub CI/CD

Cleveland-Cliffs Inc; Cleveland (OH); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health insurance

Retirement plan

Education assistance

Paid time off

Bonus opportunity

Job summary

Cleveland-Cliffs Inc. is seeking a Lead IT DevSecOps Engineer to consolidate GitHub-based CI/CD across the enterprise and embed Secure SDLC into every pipeline.

The role partners with Cybersecurity, IT Infrastructure, and Applications leadership, driving secure-by-default workflows and a strong CI/CD discipline while delivering an on-site program with future growth into Architect/Principal or leadership paths as the scope expands to AI/ML security.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field, or equivalent work experience.
• 6+ years in DevOps, DevSecOps, or platform engineering.
• Hands-on experience with repository and CI/CD consolidations or migrations.
• Strong scripting and programming in NodeJS and C# (Python also valued).
• Deep proficiency with Git, GitHub, and GitHub Actions.
• Experience integrating SAST, DAST, dependency scanning, and secret detection into CI/CD pipelines.
• Working knowledge of containerization and Azure cloud.
• Must be able to work full-time onsite.
• Applicants must be legally authorized to work in the United States; Cleveland‑Cliffs does not provide sponsorship.

Responsibilities

• Consolidate source control and CI/CD onto GitHub.
• Partner with application development teams to migrate repos and set standards.
• Champion Secure SDLC.
• Integrate SAST, DAST, dependency scanning, and secret detection into pipelines.
• Build automation and the platform.
• Design CI/CD pipelines using GitHub Actions.
• Author build and deployment automation in NodeJS and C#; manage DevOps infra and cloud services.
• Coach developers and create reusable templates.
• Move program goals to consolidation and Secure SDLC foundation.
• Expand scope to AI/ML pipeline security.
• Grow into Architect/Principal or leadership path.
• Other duties as assigned.

Skills

CI/CD discipline

Secure SDLC

DevSecOps

Scripting

Education

Bachelor's degree in CS/IT or related

Tools

Git

GitHub

GitHub Actions

Terraform

ARM templates

Job description

Cleveland-Cliffs Inc. is seeking a Lead IT DevSecOps Engineer to consolidate GitHub-based CI/CD across the enterprise and embed Secure SDLC into every pipeline.

The role partners with Cybersecurity, IT Infrastructure, and Applications leadership, driving secure-by-default workflows and a strong CI/CD discipline while delivering an on-site program with future growth into Architect/Principal or leadership paths as the scope expands to AI/ML security.