Senior DevSecOps Engineer

Senior DevSecOps Engineer

Location: Chicago, Illinois (Hyrbid, 3 days onsite)

Role Overview

We are seeking a Senior DevSecOps Engineer to help design, build, and harden a cloud-native immutable evidencing platform. This platform is built to ingest compliance artifacts, audit evidence, and control attestations from various internal tools. The role involves ensuring the platform, built on Azure, aligns with PCI-DSS, SOX, and GLBA requirements by storing data with cryptographic integrity and exposing capabilities to GRC and audit workflows.

Key Responsibilities

• Design and implement API ingestion pipelines via Azure API Management (APIM) with OAuth2/JWT validation, rate limiting, and schema enforcement.
• Build event-driven ingestion workflows using Azure Service Bus and Azure Functions.
• Implement immutable artifact storage using Azure Blob Storage with WORM policies and Azure Cosmos DB for metadata indexing.
• Architect Redis Cache for high-throughput query caching.
• Integrate Azure Key Vault for envelope encryption of stored artifacts, including customer-managed keys and automated rotation.
• Build Log Analytics Workspace telemetry pipelines for ingestion events, access audits, and integrity logs.
• Write Terraform Infrastructure as Code (IaC) for all infrastructure resources.
• Implement third-party tool integrations via APIs to ingest evidence artifacts.

Required Qualifications

Experience: 5+ years building production workloads on Azure, with demonstrated experience in event-driven and API-first architectures. Experience with immutable/append-only storage patterns is required.

Technical Skills:

• Strong experience with Azure API Management (APIM), including policies, backends, and versioning.
• Proficiency in deploying and managing NoSQL and CosmosDB databases.
• Solid Terraform skills, including modules, remote state, and CI/CD integration.
• Strong coding experience in Python and Node.
• Familiarity with envelope encryption patterns using Key Vault.
• Understanding of zero-trust network design (Private Endpoints, VNet integration, NSG/UDR).
• Ability to write KQL for operational queries, alerting, and audit log analysis.
• Experience integrating with third-party tool APIs.
• Hands-on proficiency with integrated testing tools.

Education: A degree in Computer Science, Information Management, or a related field is preferred.

Preferred Qualifications

• Azure Security Engineer Associate certification.
• AWS Certified Security - Specialty certification.
• CISSP or CCSP certification.