Senior DevSecOps Engineer

Senior DevSecOps Engineer

• Position Overview
• We are hiring a Senior DevSecOps Engineer to own cloud infrastructure, CI/CD pipelines and security for a commercial real estate software company. Its platform helps companies manage property leases, documents, key dates, tasks and lease accounting compliance.
• Azure is the primary cloud platform, with AWS also part of the environment. The priority is a strong DevSecOps engineer on the Microsoft stack who can work independently, identify risks proactively and learn unfamiliar tools and services.

Responsibilities

• Build and manage cloud infrastructure on Azure and AWS, defined as code using Terraform.
• Set up and maintain Azure DevOps CI/CD pipelines for building, testing and deploying the platform.
• Apply security best practices across cloud and on-premises systems, including access control, vulnerability management, patching and compliance.
• Use Microsoft Defender for Cloud, Endpoint and Identity to monitor and respond to security issues.
• Set up logging, metrics and alerting to provide visibility into production systems.
• Administer Windows and Linux servers, including patching, hardening and maintaining availability.
• Automate repetitive work using PowerShell, Bash or Python.
• As a secondary responsibility, support Microsoft 365 and Entra ID administration, including users, groups, access and MFA; support device management through Intune; and handle IT escalations when needed.

Requirements

• 5+ years of experience in DevOps or cloud engineering roles.

• Strong hands-on Azure experience, including building and operating production infrastructure and working with core services across compute, networking, identity, storage and Key Vault.

• Some hands-on AWS experience in addition to Azure. Azure is the primary platform, but AWS exposure is required.

• Infrastructure-as-code experience with Terraform or a similar tool, such as Bicep or CloudFormation.

• Experience building or maintaining CI/CD pipelines, ideally in Azure DevOps. GitHub Actions or similar experience is acceptable.

• Knowledge of cloud and DevOps security best practices, including identity and access management, secrets management, network security and vulnerability management.

• Good general working knowledge of both Windows and Linux servers, with confidence administering both.

• Scripting experience in PowerShell, Bash or Python.

• Experience with monitoring and observability, including logging, metrics and alerting, using tools such as Azure Monitor or Application Insights.

• Ability to take ownership of a problem and work independently without close supervision.

• A proactive approach to identifying and raising infrastructure or security risks before they become incidents.

• Ability to learn new tools and services, including working independently from documentation.

• Nice to have

• Microsoft 365 administration, including Exchange Online, SharePoint, Teams and licensing.

• Entra ID administration, including groups, conditional access and MFA.

• Device management with Intune.

• Experience with Microsoft Defender for Cloud, Endpoint or Identity.

• Azure Landing Zones or Cloud Adoption Framework experience.

• PBX/VoIP telephony administration.

• Helpdesk or IT support experience.

• Azure, AWS or security certifications.

• Check how your CV matches this job

• [No explicit application destination provided in the source; apply via the site's standard flow.]