Experienced DevSecOps Engineer

Serco is a defense, citizen services, and transportation services company serving government and commercial clients. The Experienced DevSecOps Engineer will embed security throughout the DevOps lifecycle by designing secure CI/CD pipelines, integrating security tools, automating cloud infrastructure, monitoring vulnerabilities, and conducting threat assessments.

Responsibilities:

• Design, implement, and maintain secure CI/CD pipelines
• Integrate security tools and practices into development and deployment workflows (e.g., SAST, DAST, container scanning)
• Collaborate with development, operations, and security teams to ensure secure software delivery
• Automate infrastructure provisioning and configuration using Infrastructure as Code (IaC) tools such as Terraform or CloudFormation
• Monitor systems for security vulnerabilities and respond to incidents
• Conduct threat modeling and risk assessments for new and existing systems
• Stay current with emerging security threats, technologies, and best practices

Requirements:

• U.S. Citizenship required
• Ability to obtain DoW Secret security clearance
• Bachelor's degree
• Minimum 5 years of experience in DevOps, Security Engineering, Software Engineering, or Cloud Engineering
• Proficiency with Azure
• Experience with any of the following CI/CD tools:
• Familiarity with containerization/orchestration with Docker and Kubernetes
• Strong scripting skills
• Certifications such as AWS Certified DevOps Engineer, Microsoft DevOps Engineer Expert, Certified Cloud Native Security Expert (CCNSE), or equivalent experience
• Experience with secrets management tools (e.g., Azure Key vault, AWS Secrets Manager)
• Familiarity with zero-trust architecture and secure software supply chain practices
• Knowledge of security frameworks and compliance standards (e.g., NIST, ISO 27001, SOC 2)
• Strong scripting skills (e.g., Python, Bash)