Sr DevSecOps Engineer

Sr DevSecOps Engineer
Terms: Direct Hire
Location/Schedule: 100% Onsite -Charlotte NC 28273

Need LOCAL only as its onsite interview

Team & Role: Client is looking for a DevSecOps Engineer to join our application engineering team. This is not a traditional DevOps role. This role must recognize and imbed security across the entire application delivery lifecycle. This teammate drives efficiency into the engineering teams work while embedding controls automation and threat-aware thinking into every pipeline deployment and platform. Youll work at the intersection ofSalesforce delivery cloud infrastructure and application security partnering with engineers and security teammates to ship fasterandsafer.

Important note:
This is the only DevOps/DevSecOps resource at Client so they will own and help create best practices from a DevOps perspective. That being said Candidates from large enterprise environments where they owned only one piece of the pipeline are likely not a fit.

Top Skills:

• 6 years of software development experience across one or more of: /C# Python or Apex
• 3 recent years in a DevOps SRE or Platform Engineering role with at least 2 years explicitly focused on DevSecOps practices.
• Hands on experience owning production systems from end-to-end (design deployment monitoring and incident response)
• Hands on experience with Salesforce CI/CD: automated testing and unit test coverage enforcement (GearSet or Copado)
• Containerize workloadswith Docker orchestrate via ECS/EKS (or AKS) and harden images against CVEs and supply-chain attacks (SBOMs signing provenance)
• Hands on experience with AWS (IAM VPC KMS CloudTrail etc.)
• Hands on experience with Infrastructure as Code (Terraform preferred)
• Hands on experience with SAST/DAST/SCA tooling; e.g. Snyk (preferrable) Checkmarx SonarQube etc.
• Communication is key - they are a small shop so this person must be able to communicate with technical teams and other business unites effectively as they will do this often (even leadership).

Nice to have:
- AWS Certification
- Salesforce certifications