DevSecOps Engineer

*No C2C*

DevSecOps Engineer

RPL International is seeking a hands-on DevSecOps Engineer with strong Microsoft Azure experience to integrate security throughout the Software Development Lifecycle (SDLC) and work closely with development, operations, and security teams.

Responsibilities

• Design, implement, and maintain secure CI/CD pipelines using Azure DevOps.
• Integrate security scanning, vulnerability assessment, code verification, and remediation into the SDLC/SSDLC.
• Secure and maintain Microsoft Azure cloud environments, including infrastructure, networking, identity, access, and security configurations.
• Implement Infrastructure as Code (IaC) using Bicep, with Terraform or ARM experience also valuable.
• Automate security and DevOps processes using PowerShell, Python, C#/.NET, or similar technologies.
• Work with developers to identify vulnerabilities, improve secure coding practices, and implement remediation.
• Work with Git, GitHub Actions, Docker, Kubernetes/AKS, and other DevOps technologies.
• Monitor and respond to security incidents and support security/compliance activities.
• Recommend improvements to strengthen the organization's security posture.

Required Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field, or 10+ years of cybersecurity and/or development experience.
• Proven experience in DevSecOps, DevOps, cybersecurity, or software development.
• Strong hands-on Microsoft Azure experience, particularly Azure DevOps and CI/CD.
• Experience with Azure cloud security, networking, identity/access management, and secure configurations.
• Experience with Infrastructure as Code, particularly Bicep.
• Strong understanding of vulnerability assessment, secure coding, threat modeling, risk management, and security best practices.
• Programming/scripting experience with C#/.NET, Python, PowerShell, or similar.
• Strong communication and collaboration skills.

Preferred

• Azure Functions, App Services, Storage, Key Vault, Azure Monitor/Application Insights
• Entra ID, RBAC, Azure Policy, Defender for Cloud
• AKS/Kubernetes and Docker
• GitHub Actions / GitOps
• SAST, DAST, dependency, secrets, and container scanning
• Angular or React experience