DevSecOps Engineer

DevSecOps Engineer

Houston, TX

Brooksource

Fortune 500 Oil & Gas Client

Overview

We are seeking an experienced DevSecOps Engineer to join a software engineering team responsible for modernizing a mission-critical application used in the energy industry. This software powers data acquisition systems deployed on drilling rigs and is a key component of customer operations.

The team is replacing a legacy platform that has been in production for 30+ years and migrating the application to a modern cloud-native architecture. This engineer will lead the DevSecOps effort by modernizing deployment processes, building secure CI/CD pipelines, and enabling the application to run within Kubernetes while supporting both legacy and next-generation deployment models.

This is a highly visible role where you will serve as the team's DevSecOps subject matter expert, partnering closely with developers and QA to drive automation, security, and operational excellence.

Key Responsibilities

• Design, build, and maintain secure CI/CD pipelines using Azure DevOps.
• Lead the migration of an existing Windows-installed application to a Kubernetes-based deployment model.
• Support both traditional software installation packages (InstallShield) and modern containerized deployments during the migration.
• Deploy and manage applications within Kubernetes (AKS preferred).
• Integrate DevSecOps best practices throughout the software development lifecycle, including:
  • Static Application Security Testing (SAST)
  • Dynamic Application Security Testing (DAST)
  • Dependency and vulnerability scanning
  • Secrets management
• Collaborate with software developers and QA engineers to implement secure, automated release processes.
• Improve deployment automation, release reliability, and environment consistency.
• Maintain and enhance Infrastructure as Code (Terraform, Bicep, ARM, or similar).
• Monitor application performance, security, and platform health.
• Drive continuous improvements in DevOps processes, tooling, and operational standards.

Required Qualifications

• 5+ years of experience in DevOps, DevSecOps, or Cloud Engineering.
• Strong experience designing and maintaining CI/CD pipelines using Azure DevOps.
• Hands-on Kubernetes experience (AKS preferred).
• Experience containerizing and deploying .NET applications.
• Knowledge of secure software delivery practices and DevSecOps principles.
• Familiarity with SAST, DAST, vulnerability management, and secure coding practices.
• Experience with Git and modern source control workflows.
• Experience with Infrastructure as Code tools such as Terraform, Bicep, or ARM templates.
• Strong troubleshooting and automation skills.

Preferred Qualifications

• Experience supporting legacy Windows application deployments and modernization initiatives.
• Knowledge of InstallShield or similar installer technologies.
• Experience with Docker and container image management.
• Experience with security tools such as SonarQube, Snyk, Checkmarx, or Microsoft Defender for Cloud.
• Familiarity with Azure monitoring and observability tools.
• Experience working within Agile development teams.

Technical Environment

• Microsoft Azure
• Azure DevOps
• Azure Pipelines
• Kubernetes (AKS)
• Docker
• C# / .NET
• Terraform / Bicep / ARM
• Git
• InstallShield
• SAST / DAST Security Tools

What We're Looking For

We're looking for someone who can step in as the DevSecOps leader for the team. You'll be the primary DevSecOps engineer supporting a collaborative group of developers and QA engineers, taking ownership of deployment automation, Kubernetes, CI/CD, and security initiatives.

Success in this role requires someone who enjoys solving complex modernization challenges, works well across teams, and is comfortable owning DevSecOps strategy from design through implementation.

Soft Skills

• Excellent collaboration and communication skills.
• Strong analytical and problem-solving abilities.
• Self-driven with a proactive approach to automation and continuous improvement.
• Team-oriented mindset with the ability to work cross-functionally.