We are hiring a Senior DevSecOps Engineer to own cloud infrastructure, CI/CD pipelines and security for a commercial real estate software company. Its platform helps companies manage property leases, documents, key dates, tasks and lease accounting compliance.
Azure is the primary cloud platform, with AWS also part of the environment. The priority is a strong DevSecOps engineer on the Microsoft stack who can work independently, identify risks proactively and learn unfamiliar tools and services.
Responsibilities
Build and manage cloud infrastructure on Azure and AWS, defined as code using Terraform.
Set up and maintain Azure DevOps CI/CD pipelines for building, testing and deploying the platform.
Apply security best practices across cloud and on-premises systems, including access control, vulnerability management, patching and compliance.
Use Microsoft Defender for Cloud, Endpoint and Identity to monitor and respond to security issues.
Set up logging, metrics and alerting to provide visibility into production systems.
Administer Windows and Linux servers, including patching, hardening and maintaining availability.
Automate repetitive work using PowerShell, Bash or Python.
As a secondary responsibility, support Microsoft 365 and Entra ID administration, including users, groups, access and MFA; support device management through Intune; and handle IT escalations when needed.
Requirements
5+ years of experience in DevOps or cloud engineering roles.
Strong hands-on Azure experience, including building and operating production infrastructure and working with core services across compute, networking, identity, storage and Key Vault.
Some hands-on AWS experience in addition to Azure. Azure is the primary platform, but AWS exposure is required.
Infrastructure-as-code experience with Terraform or a similar tool, such as Bicep or CloudFormation.
Experience building or maintaining CI/CD pipelines, ideally in Azure DevOps. GitHub Actions or similar experience is acceptable.
Knowledge of cloud and DevOps security best practices, including identity and access management, secrets management, network security and vulnerability management.
Good general working knowledge of both Windows and Linux servers, with confidence administering both.
Scripting experience in PowerShell, Bash or Python.
Experience with monitoring and observability, including logging, metrics and alerting, using tools such as Azure Monitor or Application Insights.
Ability to take ownership of a problem and work independently without close supervision.
A proactive approach to identifying and raising infrastructure or security risks before they become incidents.
Ability to learn new tools and services, including working independently from documentation.
Nice to have
Microsoft 365 administration, including Exchange Online, SharePoint, Teams and licensing.
Entra ID administration, including groups, conditional access and MFA.
Device management with Intune.
Experience with Microsoft Defender for Cloud, Endpoint or Identity.
Azure Landing Zones or Cloud Adoption Framework experience.