Location: DFW
Department: DEPADM
The Opportunity The DevSecOps Engineer - Azure designs, automates, secures, deploys, and operates cloud platforms and delivery capabilities within Microsoft Azure. This hands-on role establishes reusable Infrastructure as Code, CI/CD, container, serverless, API management, networking, security, observability, and environment-management patterns for enterprise data, integration, and application workloads. The position collaborates with Enterprise Architecture, Cybersecurity, Infrastructure, Data Engineering, Enterprise Integration, and Application Development teams to create secure, repeatable, and supportable deployment practices across development, test, staging, disaster recovery, and production environments.
This role is 100% onsite in the far North Dallas/ Plano area.
What you will do? DevSecOps and CI/CD Automation • Design, implement, and maintain CI/CD pipelines using Azure DevOps Pipelines and/or GitHub Actions.
• Develop reusable YAML pipeline templates for infrastructure, applications, APIs, containers, serverless services, integration components, and data-platform resources.
• Implement automated build, test, security scanning, artifact management, deployment, validation, approval, rollback, and release processes.
• Establish standards for Git branching, pull requests, code reviews, versioning, release management, protected environments, and deployment controls.
• Automate environment promotion across development, test, staging, disaster recovery, and production.
• Implement secure pipeline authentication using managed identities, service connections, and workload identity federation while eliminating embedded secrets.
Infrastructure as Code and Cloud Automation • Design, develop, test, and maintain reusable Infrastructure as Code modules using Terraform and/or Bicep.
• Automate Azure infrastructure, networking, security, monitoring, application, integration, and data-platform deployments.
• Create standardized modules for resource groups, networks, private endpoints, DNS, Key Vault, managed identities, storage, monitoring, containers, serverless services, and API gateways.
• Establish module standards for naming, tagging, parameterization, documentation, versioning, testing, and release management.
• Implement Terraform remote state, locking, state isolation, plan review, imports, drift detection, and controlled recovery.
• Automate linting, validation, security scanning, policy checks, cost review, and configuration-drift remediation.
Containers, Serverless, and Integration Automation • Build, secure, deploy, and operate containerized applications, APIs, and integration services.
• Implement automated container image build, test, scanning, signing, promotion, retention, and lifecycle processes.
• Deploy workloads to Azure Container Apps, Azure Kubernetes Service, Azure Container Instances, or App Service containers based on workload requirements.
• Design and automate deployment patterns for Azure Functions, Logic Apps, Service Bus, Event Grid, and related cloud-native services.
• Configure managed identities, Key Vault references, private endpoints, virtual network integration, diagnostic settings, and secure application configuration.
• Support reliable messaging patterns, health validation, staged releases, rollback, scaling, workload identity, networking, and observability.
API Gateway and API Lifecycle Automation • Deploy and manage Azure API Management using Infrastructure as Code and automated pipelines.
• Automate API publication and configuration from OpenAPI specifications.
• Configure products, subscriptions, version sets, revisions, backends, named values, certificates, and policies.
• Implement OAuth 2.0, OpenID Connect, JWT validation, certificate authentication, managed identities, and subscription controls.
• Develop reusable policies for authentication, authorization, throttling, quotas, caching, validation, transformation, correlation, logging, and error handling.
• Automate API testing, contract validation, versioning, policy validation, promotion, and rollback.
Azure Networking, Security, and Compliance • Design and automate virtual networks, subnets, route tables, network security groups, private DNS zones, private endpoints, service endpoints, and secure connectivity patterns.
• Configure and automate Azure Firewall, NAT Gateway, Application Gateway, Web Application Firewall, Front Door, Load Balancer, VPN Gateway, and related services.
• Apply security-by-design, Zero Trust, defense-in-depth, and least-privilege principles across Azure resources and delivery pipelines.
• Implement Azure RBAC, Microsoft Entra ID groups, managed identities, service principals, privileged access processes, separation of duties, Azure Policy, and compliance reporting.
• Integrate Microsoft Defender for Cloud, vulnerability management, Key Vault, encryption, security testing, and policy-as-code practices.
• Support security reviews, threat modeling, incident response, audit evidence, vulnerability remediation, and service hardening.
Observability, Platform Engineering, and Collaboration • Implement centralized logging, metrics, distributed tracing, dashboards, and alerts using Azure Monitor, Log Analytics, Application Insights, and related services.
• Monitor deployments, resource health, application performance, security events, certificate expiration, capacity, and cost, and automate operational remediation where appropriate.
• Build reusable platform capabilities, golden paths, and reference implementations for applications, APIs, containers, functions, messaging, infrastructure, and data-platform services.
• Create automation using PowerShell, Azure CLI, Bash, Python, REST APIs, and Microsoft Graph.
• Partner with Data Engineering teams to automate Microsoft Fabric, Azure Data Factory, ADLS Gen2, Databricks, Power BI, and related platform deployments where applicable.
• Maintain technical documentation, architecture diagrams, runbooks, standards, reusable templates, and troubleshooting procedures.
Required Qualifications • Bachelor's degree in Computer Science, Information Systems, Software Engineering, Cybersecurity, Cloud Engineering, or a related discipline, or equivalent professional experience.
• 5+ years of professional experience in DevOps, DevSecOps, cloud engineering, platform engineering, infrastructure automation, or software delivery.
• 3+ years of hands-on experience implementing and supporting production workloads in Microsoft Azure.
• Proven experience building CI/CD pipelines and Infrastructure as Code solutions for enterprise environments.
• Experience deploying and operating cloud-native applications, APIs, containers, serverless services, or integration workloads.
• Strong understanding of Azure identity, networking, security, monitoring, governance, and deployment architecture.
• Strong scripting, troubleshooting, source-control, documentation, communication, and cross-functional collaboration skills.
Required Technical Skills • Git, Azure Repos and/or GitHub, Azure DevOps Pipelines and/or GitHub Actions, YAML templates, reusable workflows, artifacts, approvals, gates, protected environments, automated testing, deployment, validation, and rollback.
• Terraform, AzureRM, Bicep, Azure Resource Manager, Azure CLI, Azure PowerShell, PowerShell, Bash, Python, REST APIs, Microsoft Graph, infrastructure testing, policy as code, and configuration validation.
• Docker, Azure Container Registry, Azure Container Apps, AKS, Kubernetes, Helm, Azure Functions, Logic Apps, Service Bus, Event Grid, autoscaling, observability, and vulnerability scanning.
• Azure API Management, OpenAPI, REST APIs, versioning, products, subscriptions, policies, OAuth 2.0, OpenID Connect, JWT, certificates, and managed identity authentication.
• Azure virtual networks, private networking, firewall and gateway services, routing, TLS, DNS, Microsoft Entra ID, RBAC, Key Vault, Azure Policy, Defender for Cloud, Azure Monitor, Log Analytics, Application Insights, and Kusto Query Language.
Preferred Qualifications • Experience supporting enterprise platforms including Oracle Fusion ERP, Deltek Costpoint, SAP S/4HANA, Microsoft Dynamics 365, Microsoft Fabric, Azure Databricks, Azure Data Factory, ADLS Gen2, Power BI, Salesforce, ServiceNow, Primavera P6, Procore, or comparable systems.
• Experience with enterprise landing zones, hybrid connectivity, shared cloud platforms, and regulated or security-sensitive environments.
• Microsoft Certified: DevOps Engineer Expert, Azure Security Engineer Associate, Azure Network Engineer Associate, or HashiCorp Certified: Terraform Associate certification is desirable but not required.
How we support you We believe your best work happens when you feel supported - professionally, personally, and financially. That's why we offer a range of benefits designed to help you thrive, stay healthy, and plan for the future.
- Performance-driven rewards • Competitive pay with incentive opportunities that recognize your results and contributions.
- Comprehensive healthcare • Medical, dental, and vision coverage that supports you and your family's total well-being.
- Security and peace of mind • Life and disability insurance programs that provide protection when it matters most.
- Flexible benefits options • A variety of voluntary benefits so you can personalize coverage to fit your needs.
- Time to recharge • Generous paid time off to relax, travel, and maintain a healthy work-life balance.
- Investing in your growth • Education assistance and tuition support to help you build skills and advance your career.
- Planning for the future • Retirement and savings programs that help you achieve long-term financial confidence.
