DevSecOps Engineer

About Brillio

The experience expected from applicants, as well as additional skills and qualifications needed for this job are listed below.

Brillio is a leading digital technology consulting and services company that helps enterprises accelerate their digital transformation journey through innovative engineering, cloud, data, AI and customer experience solutions through a team of 5,000+ experts technologically elevating 200 companies globally. . Brillio partners with global enterprises to build modern, scalable, and business-driven technology platforms that deliver measurable outcomes and competitive advantage. With a strong culture centered around Customer Success, We Care, Entrepreneurial Mindset, and Excellence, Brillio empowers organizations to drive innovation, improve operational efficiency, and create exceptional customer experiences. Through its highly skilled technology workforce and deep domain expertise, Brillio delivers impactful solutions across Product Engineering, Data & AI, Digital Experience, Cloud, and Infrastructure services.

Find your passion and build your career with Brillio.

Role: DevSecOps Engineer

Location: Minnetonka, MN – 3days/week Hybrid role

Job Summary

We are seeking an experienced Senior DevSecOps Engineer with deep expertise in GitHub Actions, CI/CD automation, DevSecOps practices, and container lifecycle management. The ideal candidate will be responsible for designing, implementing, and maintaining secure, scalable, and enterprise-grade delivery pipelines while ensuring software quality, security compliance, and operational excellence.

Key Responsibilities

• Design, develop, and maintain enterprise-scale CI/CD pipelines using GitHub Actions.
• Implement DevSecOps practices across the software development lifecycle to embed security, compliance, and quality controls.
• Build, package, and manage containerized applications using Docker and Kubernetes.
• Manage container image repositories, promotion strategies, and artifact lifecycle using JFrog Artifactory.
• Configure and maintain automated build, release, and deployment processes across multiple environments.
• Administer and optimize SonarQube platforms, including quality gates, code coverage metrics, technical debt analysis, and security scanning.
• Integrate SAST, DAST, dependency scanning, container scanning, and secret detection tools into CI/CD pipelines.
• Collaborate with application, infrastructure, security, and platform engineering teams to improve deployment reliability and velocity.
• Establish governance around release management, artifact versioning, and deployment standards.
• Troubleshoot build failures, performance bottlenecks, and deployment issues across distributed systems.
• Drive automation initiatives to eliminate manual processes and improve developer productivity.
• Develop monitoring, alerting, and observability capabilities for CI/CD platforms and deployment pipelines.

Required Skills

CI/CD & Automation

• Deep hands-on experience with GitHub Actions including reusable workflows, composite actions, environment protection rules, self-hosted runners, and enterprise CI/CD architectures.
• Strong expertise in YAML-based pipeline development and automation best practices.
• Experience implementing deployment strategies such as Blue-Green, Canary, and Rolling Deployments.

DevSecOps

• Hands-on experience implementing DevSecOps controls and shift-left security practices.
• Experience integrating security tools into CI/CD pipelines.
• Strong understanding of vulnerability management, secrets management, compliance, and supply chain security.

Containerization & Artifact Management

• Extensive experience with Docker container build processes and optimization techniques.
• Expertise in container image promotion pipelines.
• Strong experience managing JFrog Artifactory repositories, permissions, retention policies, and artifact promotion workflows.
• Understanding of OCI-compliant artifacts and container registries.

Code Quality & Governance

• Strong SonarQube administration experience.
• Ability to configure and manage quality profiles, quality gates, security rules, and code analysis workflows.
• Experience implementing enterprise code quality governance frameworks.

Cloud & Platform Engineering

• Experience with Kubernetes administration and container orchestration.
• Familiarity with cloud platforms such as Azure, AWS, or GCP.
• Experience with Infrastructure as Code (Terraform preferred). xhyhwjd

Scripting & Programming

• Proficiency in one or more scripting languages:
• Python
• Bash/Shell
• PowerShell

Know what it's like to work and grow at Brillio: Employment Opportunity Declaration

Brillio is an equal opportunity employer to all, regardless of age, ancestry, colour, disability (mental and physical), exercising the right to family care and medical leave, gender, gender expression, gender identity, genetic information, marital status, medical condition, military or veteran status, national origin, political affiliation, race, religious creed, sex (includes pregnancy, childbirth, breastfeeding, and related medical conditions), and sexual orientation.

LI-CH1