Azure DevSecOps Engineer

Dice is the leading career destination for tech experts at every stage of their careers. Our client, New York Technology Partners, is seeking the following. Apply via Dice today!

Title: Azure DevSecOps Engineer Location: Cary, NC (Onsite) Position: Contract

Job Description

DevSecOps Engineer to join our team and take ownership of implementing and maintaining secure DevOps pipelines and infrastructure across multicloud platforms including Azure

The ideal candidate will possess a deep understanding of modern DevOps principles infrastructure as code IaC cloud native security tools and be proficient in integrating security into every stage of the software development lifecycle SDLC

You will be responsible for establishing and enforcing DevSecOps best practices automating security scans in CICD pipelines and collaborating with development operations and security teams to improve overall application and infrastructure security posture

This role is hands-on and strategic focusing on the end-to-end security of cloud infrastructure CICD pipelines applications containers and third-party dependencies

Key Roles and Responsibilities:

DevSecOps Pipeline Automation Design and implement CICD pipelines with integrated security checks across Azure DevOps GitHub Actions GitLab and Jenkins Automate security gates for SAST DAST SCA secrets scanning and container security using tools like Veracode Snyk OWASP ZAP Aqua Trivy and Checkov

Define policies and integrate them as code to enable scalable secure deployments MultiCloud Security Architecture Secure cloud infrastructure in Azure using native services Implement network security data encryption identity access management IAM and secure VPC configurations Infrastructure as Code IaC Security Use Terraform Bicep Pulumi or CloudFormation to build and manage secure infrastructure

Apply CIS benchmarks NIST standards and integrate tools like OPA Open Policy Agent and Conftest to enforce IaC security Conduct IaC scanning for misconfigurations using tools like Checkov tfsec

Collaboration and Mentoring Collaborate with development teams to define secure coding standards and perform secure code reviews

Mentor junior DevOps and security engineers on secure development and deployment practices Evangelize a Security as Code culture across the organization

Required Skills Toolsets: Cloud Platforms Microsoft Azure Key Vault Defender for Cloud Azure DevOps Sentinel