DevSecOps Engineer

The DevSecOps Engineer will support the administration, implementation, maintenance, and adoption of enterprise software development, security, and delivery platforms. This role will serve as a technical subject matter expert responsible for integrating security, automation, and operational best practices into the software development lifecycle (SDLC). The engineer will collaborate with development teams, infrastructure teams, cybersecurity personnel, and business stakeholders to improve software quality, security posture, and delivery efficiency.

Primary Responsibilities

Veracode Administration and Onboarding

• Administer and maintain the Veracode platform, including user provisioning, role management, policy configuration, and system governance.

• Support onboarding of application teams to Veracode security scanning capabilities.

• Configure and support SAST, DAST, SCA, container, and other application security scanning services.

• Assist development teams with vulnerability remediation activities and security best practices.

• Develop documentation, standards, training materials, and operational procedures.

SonarQube Administration and Onboarding

• Administer and maintain SonarQube environments, projects, quality profiles, quality gates, and user access controls.

• Onboard application teams and integrate SonarQube into CI/CD pipelines.

• Support code quality initiatives and assist teams with remediation of technical debt and code quality issues.

• Establish and maintain enterprise coding standards and reporting metrics.

GitLab Administration and Maintenance

• Administer and maintain GitLab Self-Managed environments.

• Configure projects, groups, repositories, runners, permissions, integrations, and security settings.

• Perform platform upgrades, maintenance, monitoring, troubleshooting, and capacity management.

• Support source code migration and repository onboarding activities.

• Maintain operational procedures, standards, and platform documentation.

CI/CD Pipeline Development and Automation

• Design, build, maintain, and optimize CI/CD pipelines using GitLab.

• Develop reusable pipeline templates and automation frameworks.

• Integrate security testing, code quality validation, compliance controls, and deployment automation into software delivery workflows.

• Support Infrastructure-as-Code (IaC), automated testing, release management, and deployment processes.

• Implement DevSecOps best practices to improve reliability, consistency, and delivery velocity.

Atlassian Jira Administration

• Administer Jira projects, workflows, permissions, issue types, dashboards, reports, and automation rules.

• Support project teams with onboarding, configuration, and governance activities.

• Configure integrations between Jira and software development platforms including GitLab and other enterprise tools.

• Develop reporting and dashboards to improve project visibility and operational metrics.

Expected Outcomes

• Successful onboarding and support of application teams to enterprise DevSecOps platforms.

• Increased adoption of automated security and quality controls across the SDLC.

• Improved software delivery efficiency and standardization.

• Reduction in security vulnerabilities and technical debt.

• Enhanced operational stability, compliance posture, and software development maturity.

Minimum Yrs of Experience, Skills, and Qualifications   

3 DevSecOps methodologies and best practices

3 CI/CD pipeline development and automation

3 Source code management and repository administration

3 Application security testing tools and practices

3 Scripting and automation

2 Experience administering and supporting AWS and/or Azure cloud environments, including cloud infrastructure, security, networking, automation, Infrastructure as Code (IaC), container platforms, and CI/CD integrations.

Preferred Skills and Qualifications            

2 Experience administering code suggestion and AI-assisted development platforms

2 Experience planning and execution migrations involving source code repositories, CI/CD platforms or DevSecOps toolchains

2 Experience supporting application modernization, cloud migration, and DevSecOps tool integrations within cloud-hosted environments is highly desired

N/A Cloud certifications