DevSecOps Engineer

DevSecOps Engineer Location: Hybrid – 3 Days onsite in Santa Clara Type: Contract (Potential for CTH) About the Role Our client is seeking a DevSecOps Engineer to help build and lead a new DevSecOps function within the organization. This role is both hands-on and strategic: you will design secure infrastructure, implement automation practices, and establish a framework for continuous integration and delivery (CI/CD) that meets enterprise-grade security standards. The ideal candidate has deep experience with infrastructure-as-code, strong knowledge of Azure cloud services, and a proven track record in CI/CD pipeline development and security integration. Key Responsibilities • Design, build, and maintain secure infrastructure using Terraform and other Infrastructure-as-Code tools. • Architect and implement CI/CD pipelines that enable automated testing, secure deployments, and high availability. • Integrate security best practices across the development lifecycle to ensure compliance and resilience. • Collaborate with software engineering, IT, and security teams to enforce DevSecOps standards. • Monitor and optimize system performance, availability, and cost efficiency in Azure. • Lead and mentor a growing team of DevSecOps engineers, setting the foundation for long-term scalability. • Develop and enforce policies, standards, and governance for infrastructure and application security. Required Qualifications • 7+ years of overall IT experience with at least 3+ years in DevOps/DevSecOps engineering. • Strong expertise in Infrastructure as Code (Terraform preferred). • Hands-on experience with Azure cloud infrastructure (networking, compute, security, monitoring). • Proven experience building and managing CI/CD pipelines (Azure DevOps, Jenkins, GitHub Actions, or similar). • Strong understanding of containerization and orchestration (Docker, Kubernetes). • Knowledge of security frameworks, compliance, and automation in cloud-native environments. • Experience in mentoring/leading teams or establishing new DevSecOps practices. Nice-to-Have Skills • Familiarity with other cloud providers (AWS, GCP). • Experience with monitoring and observability tools (Prometheus, Grafana, ELK). • Background in scripting/programming (Python, PowerShell, Go, or similar). • Knowledge of Zero Trust, identity management, and API security.