Job DescriptionThis is an onsite role; only local candidates will be considered.The
DevSecOps Engineer will support the Texas Department of Transportation (TxDOT). This role is responsible for the administration, implementation, maintenance, and adoption of enterprise software development, security, and delivery platforms. The engineer will serve as a technical subject matter expert, integrating security, automation, and operational best practices into the software development lifecycle (SDLC). This position will collaborate with development teams, infrastructure teams, cybersecurity personnel, and business stakeholders to improve software quality, security posture, and delivery efficiency. Core platform responsibilities include Veracode, SonarQube, GitLab, and Atlassian Jira administration, along with CI/CD pipeline development and automation.
Responsibilities- Administer and maintain the Veracode platform, including user provisioning, role management, policy configuration, and system governance.
- Support onboarding of application teams to Veracode security scanning capabilities, including SAST, DAST, SCA, and container scanning services.
- Assist development teams with vulnerability remediation activities and security best practices.
- Administer and maintain SonarQube environments, projects, quality profiles, quality gates, and user access controls.
- Onboard application teams and integrate SonarQube into CI/CD pipelines to support code quality initiatives.
- Administer and maintain GitLab Self-Managed environments, including projects, groups, repositories, runners, permissions, and integrations.
- Perform GitLab platform upgrades, maintenance, monitoring, troubleshooting, and capacity management.
- Design, build, maintain, and optimize CI/CD pipelines, including reusable pipeline templates and automation frameworks.
- Integrate security testing, code quality validation, compliance controls, and deployment automation into software delivery workflows.
- Administer Jira projects, workflows, permissions, issue types, dashboards, reports, and automation rules, including integrations with GitLab and other enterprise tools.
RequirementsMinimum Qualifications- 3 years of experience with DevSecOps methodologies and best practices.
- 3 years of experience with CI/CD pipeline development and automation.
- 3 years of experience with source code management and repository administration.
- 3 years of experience with application security testing tools and practices.
- 3 years of experience with scripting and automation.
- 2 years of experience administering and supporting AWS and/or Azure cloud environments, including cloud infrastructure, security, networking, automation, Infrastructure as Code (IaC), container platforms, and CI/CD integrations.
Preferred Qualifications- 2 years of experience administering code suggestion and AI-assisted development platforms.
- 2 years of experience planning and executing migrations involving source code repositories, CI/CD platforms, or DevSecOps toolchains.
- 2 years of experience supporting application modernization, cloud migration, and DevSecOps tool integrations within cloud-hosted environments.
- Cloud certifications.
Additional Requirements- May be required to work outside the normal business hours on weekends, evenings and holidays
- Local candidates only; must currently live within 50 miles of the Austin, Texas work location.
Work Location and ScheduleLocation: 125 E. 11th Street, Austin, Texas 78701
Schedule: Monday through Friday, 8:00 AM to 5:00 PM, excluding State holidays
Work Arrangement: Onsite
