Senior DevSecOps Engineer

Senior DevSecOps Engineer - Chicago, IL (Hybrid)

About the Role
Join a dynamic, innovation-focused team as a Senior DevSecOps Engineer and play a pivotal role in building a cloud-native immutable evidencing platform. Based in Chicago with a flexible hybrid schedule (3 days onsite), you'll architect and secure a cutting-edge solution that ensures compliance and integrity for enterprise audit, GRC, and compliance workflows. This is an opportunity to work with top-tier Azure technologies and drive security excellence in a high-impact environment.

Responsibilities

- Design and implement robust API ingestion pipelines using Azure API Management (APIM), incorporating OAuth2/JWT validation, rate limiting, and schema enforcement.
- Build and optimize event-driven workflows with Azure Service Bus and Azure Functions for efficient artifact ingestion.
- Architect immutable storage solutions leveraging Azure Blob Storage (WORM policies) and Cosmos DB for secure metadata indexing.
- Engineer high-throughput query caching with Redis Cache for superior platform performance.
- Integrate Azure Key Vault for envelope encryption, supporting customer-managed keys and automated key rotation.
- Develop telemetry pipelines using Log Analytics Workspace to monitor ingestion events, access audits, and integrity logs.
- Write Infrastructure as Code (IaC) with Terraform, ensuring secure, scalable, and automated deployments.
- Enable seamless evidence ingestion from third-party tools via API integrations.
- Collaborate with cross-functional teams to align with PCI-DSS, SOX, and GLBA requirements.

Required Skills and Experience

- 5+ years hands-on experience architecting and deploying production workloads on Azure, with specialization in event-driven and API-first architectures.
- Proven expertise in Azure API Management (APIM), Azure Blob Storage, Cosmos DB, and Redis Cache.
- Advanced proficiency with Terraform IaC, including module creation, remote state management, and CI/CD integration.
- Strong coding capabilities in Python and Node.
- Deep understanding of envelope encryption with Azure Key Vault and zero-trust network design (Private Endpoints, VNet, NSG/UDR).
- Skilled in writing KQL for operational queries, alerting, and audit log analysis.
- Experience integrating with third-party tool APIs and using integrated testing tools.
- Bachelor's degree in Computer Science, Information Management, or a related technical field.

Preferred Skills

- Azure Security Engineer Associate certification
- AWS Certified Security - Specialty certification
- CISSP or CCSP certification

Benefits

- Competitive compensation
- Hybrid work flexibility (3 days onsite in Chicago)
- Opportunity to lead and innovate in a high-impact, compliance-driven environment
- Engage with the latest Azure technologies and best practices
- Professional growth through challenging projects and cross-team collaboration

How to Apply
Ready to advance your DevSecOps career and shape the future of secure, cloud-native platforms? Submit your application today and join a forward-thinking team dedicated to technical excellence and security innovation.