Senior DevOps Engineer

Senior DevOps Engineer Salary: $150k-$180k Location: Chicago, IL or Houston, TX Hybrid: 3 days onsite, 2 days remote We are unable to provide sponsorship for this role Qualifications • Bachelor’s degree • 8+ years in DevOps, Cloud Engineering, Systems Engineering, or DevSecOps, including 5+ years integrating security into CI/CD pipelines. • Deep experience with CI/CD platforms (e.g., Azure DevOps, GitHub Actions, Jenkins, GitLab) and embedding security controls throughout development workflows. • Strong experience with cloud platforms (especially Microsoft Azure and/or AWS) and Infrastructure as Code practices. • Hands-on experience with Docker and Kubernetes, including security best practices. • Solid understanding of application security concepts, secrets management, authentication protocols, and policy enforcement tools (e.g., Azure Policy, Open Policy Agent (OPA), Sentinel). • Proficiency in scripting languages such as PowerShell, Python, or Bash to drive automation and efficiency. • Strong foundation in operating systems, networking, APIs, and distributed systems. • Experience with platforms such as Dynatrace, Prometheus, Grafana, ELK Stack (Elasticsearch, Logstash, Kibana), Splunk, or Azure Monitor. Responsibilities • Secure CI/CD Enablement: Design, build, and maintain secure continuous integration/continuous delivery (CI/CD) pipelines that streamline application build, testing, and deployment. • Security Integration: Embed security tooling into the software development lifecycle, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), secrets scanning, and infrastructure security scanning. • Infrastructure as Code (IaC): Develop and manage infrastructure using code with tools such as Terraform, Bicep, Azure Resource Manager (ARM), or CloudFormation. • Cloud Security Management: Administer and secure cloud environments, primarily within Microsoft Azure, ensuring compliance and operational integrity. • Container & Kubernetes Security: Implement and manage container and orchestration security, including image scanning, role-based access control (RBAC), and runtime protections. • Standards & Governance: Establish and enforce secure coding, deployment, and access management standards across teams. • Identity & Secrets Management: Secure and manage certificates, secrets, and identity/access controls using enterprise tools and best practices. • Monitoring & Observability: Track system health and performance using monitoring and alerting platforms to proactively identify and resolve issues. • Vulnerability Management: Coordinate remediation efforts and support compliance and regulatory initiatives.