DevSecOps Engineer

Title DevSecOps Engineer

Department Engineering

Location Niwot/Hybrid

Reports To Senior Firmware Engineering Manager

About Us

Established in 1972 Particle Measuring Systems is a global leader for micro-contamination monitoring equipment improving the performance of clean manufactures in the semiconductor and pharmaceutical industries. Were a growing technology company in Niwot Colorado the heart of the Rocky Mountains. We offer an exceptional and rewarding work environment in a great place to live. Our employees enjoy challenging projects in the development and manufacture of light scattering particle counters and diverse technologies and applications.

Your Impact

We are looking for a DevSecOps Engineer who will contribute to the success of our Engineering team by designing implementing and managing secure development testing compliance and release this role you will help ensure the efficient secure and reliable delivery of firmware and software products while collaborating with cross-functional teams to drive continuous improvement operational excellence and security-first development practices.

The Role

The DevSecOps Engineer plays a critical role in building and maintaining secure cloud infrastructure CI/CD pipelines automated testing environments and security compliance processes. This position partners closely with software firmware quality and cybersecurity teams to integrate security throughout the software development lifecycle and support the successful delivery of high-quality products.

Job Responsibilities

• Design implement and maintain secure cloud environments and CI/CD pipelines that integrate automated security testing vulnerability management compliance controls and continuous security monitoring

• Implement and promote security and compliance practices including vulnerability scanning dependency analysis Software Bill of Materials (SBOM) management threat modeling and secure coding standards using SAST DAST and SCA tools

• Collaborate with firmware and software development teams to improve workflows release strategies automated testing environments and secure development practices

• Automate provisioning and configuration of servers containers and infrastructure components using Infrastructure as Code (IaC) and configuration management tools

• Manage software artifacts and third-party dependencies through binary repository management solutions

• Implement and maintain monitoring logging and observability solutions to ensure the availability performance and security of CI/CD infrastructure

• Participate in the vulnerability management lifecycle including investigation prioritization and remediation support for security vulnerabilities and incidents

• Troubleshoot and resolve issues related to development environments automated testing systems release processes and security incidents

• Provide technical guidance and mentorship across teams promoting knowledge sharing continuous improvement and secure software development practices

• Continuously evaluate processes and tools to improve efficiency quality reliability and security

• This job description is not intended to be all-inclusive. Responsibilities may evolve over time and other related duties may be assigned to meet the ongoing needs of the company

Required Qualifications

• Bachelor of Science in Computer Science or related Engineering field

• Proven experience as a DevSecOps Engineer Security-Focused DevOps Engineer or similar role

• Development experience ineitherembeddedfirmwareor software

• FamiliarityintegratingSAST DAST SCA and SBOM tools into CI/CD pipelines

• Hands-on experienceworking withbinary repositories

• Proficiencywith AWS or other major cloud platforms

• ProficiencyinIaCandconfiguration management tools

• Strong scripting skills in languages like Bash Python or PowerShell

• Familiar with build tools such asCMake Make or customtoolchains

• Experience with containerization technologies such as Docker

• Working knowledge of CI/CD tools like Jenkins Bitbucket PipelinesandGitHub Actions

• Familiarity with Cyber Security practices including cybersecurity principles vulnerability management andDevSecOpspractices

• Familiarity with monitoring and logging tools such as Prometheusand Grafana

• Excellent problem-solving and troubleshooting skills with the ability to analyze complex systems andidentifyroot causes

• Working knowledge of shift-leftprinciples and practices

• Strong communicationand collaboration skillscapableofworkingeffectivelywithin a team

Preferred Qualifications

• Understanding ofAgileDevOpsandDevSecOpsmethodologies and their application in software development processes

• Expertisein Gitand the Atlassian suite ofsoftwaredevelopment tools includingBitbucketpipelines

• Experience integrating security scanning tools into CI/CD pipelines

• Familiarity with software composition analysis (SCA) and open-source compliance practices

• Familiarity with DORA metrics

• Certifications in AWS Cyber Security orDevSecOpspractices

• Experience with SBOM standardssuch asSPDXandCycloneDX

• Familiar with industry standards such as EN 18037 and IEC 62443

• Knowledge of the EU Cyber Resilience Act

• Experience inmulti-disciplinary engineering environment

Work Environment & Physical Requirements

• This position follows a hybrid work schedule and is expected to be on-site at least 3 days per week based on project priorities and business needs

• This role primarily operates in an office/lab/manufacturing environment. Must be able to sit stand and use a computer for extended periods of time

• Occasional lifting of up to 20 lbs. may be required

• Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions of this role

Compensation & Benefits

• Competitive base salary range: $95000 - 130000 depending on experience

  • Our compensation philosophy: we offer competitive pay based on market data including local national and industry benchmarks. For new hires offers are generally within the established min- to mid-point of the range for the role with flexibility to recognize experience skills and education. Our approach ensures fair pay internally while remaining competitive externally and allows room for growth.

• Comprehensive benefits package:

  • Health coverage: medical dental vision fsa onsite clinic (CO employees) life insurance

  • 401(k) retirement plan with company match

  • Vacation holiday and leave policies

  • Tuition reimbursement Employee recognition programs Employee assistance programs

Particle Measuring Systems is proud to be an Equal Opportunity Employer and are committed to building an inclusive and supportive workplace where everyone can thrive.

#LI-JC1