DevSecOps Engineer
Posted 9hrs ago
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
DevSecOps Engineer securing CI/CD pipelines, cloud infrastructure, containers, and vulnerability management. Supporting STChealth’s technology platform for immunization data exchange and public health.
Responsibilities:
- Lead the design, implementation, and maintenance of secure CI/CD pipelines, automating security scanning (SAST, DAST, SCA) alongside build, test, and deployment processes
- Architect, manage, and harden scalable, highly available, and compliant cloud infrastructure
- Implement and manage container security and orchestration technologies such as Docker and Kubernetes
- Stay up to date with emerging industry trends, security standards, and best practices in DevSecOps, cloud security, and vulnerability management
- Provide guidance, training, and mentorship to team members on secure development lifecycle practices and Infrastructure as Code security
- Implement SAST, DAST, SCA, and secrets detection into existing build pipelines
- Design, deploy, and manage enterprise secrets management solutions and enforce least privilege access through IAM policies and Zero Trust architecture
- Establish continuous vulnerability assessment processes across cloud instances, container registries, and software dependencies
- Collaborate with development teams to triage and patch vulnerabilities based on risk priority
- Partner with Security Operations to build automated threat monitoring, anomaly detection, audit logging, and response capabilities across cloud environments and delivery pipelines
Requirements:
- Bachelor’s degree in Computer Science, Cyber Security, Engineering, related field, or relevant equivalent experience
- 7+ years of experience in DevOps, DevSecOps, or Infrastructure Engineering with a strong security focus
- Extensive experience integrating automated security gates into CI/CD pipelines (e.g., GitHub Actions, GitLab CI, Jenkins)
- Expertise in scripting and automation languages (e.g., Python, Bash, Go)
- Expertise with major cloud platforms (AWS, Azure, or GCP) and cloud security tooling (e.g., IAM, Security Hub, GuardDuty)
- In-depth knowledge of infrastructure as code tools
- Excellent communication, incident handling, and cross-team collaboration skills
Benefits:
- Plenty of opportunities to grow your career
- Comprehensive medical, dental, and vision benefits
- 3 weeks of vacation plus 5 personal days to recharge
- Employee stock ownership
- RRSP program
- 401k + matching
- A chance to give back through community involvement
- Flexible work arrangements to suit your lifestyle
- Casual work environment
- Comprehensive benefit package
- Opportunity to learn
- Award-winning culture


















