DevSecOps Engineer
Free to start · No card · 5 credits the moment you sign up
Job description
As a DevSecOps Engineer, this professional will lead the integration of security into software development, continuous integration, continuous delivery (CI/CD), and cloud operations. They will design and maintain secure CI/CD pipelines, automate security controls ("shifting security left"), manage cloud infrastructure, and ensure system scalability, high availability, and compliance.
The DevSecOps Engineer will also mentor team members on secure coding and infrastructure practices, leading cross-functional alignment between engineering, security, and operations teams.
Responsibilities:
- Lead the design, implementation, and maintenance of secure CI/CD pipelines, automating security scanning (SAST, DAST, SCA) alongside build, test, and deployment processes.
- Architect, manage, and harden scalable, highly available, and compliant cloud infrastructure.
- Implement and manage container security and orchestration technologies (e.g., Docker, Kubernetes) to optimize deployment and runtime safety.
- Stay up to date with emerging industry trends, security standards, and best practices in DevSecOps, cloud security, and vulnerability management.
- Provide guidance, training, and mentorship to team members on secure development lifecycle (SDLC) practices and Infrastructure as Code (IaC) security.
Requirements:
- Bachelor’s degree in Computer Science, Cyber Security, Engineering, related field, or relevant equivalent experience.
- 7+ years of experience in DevOps, DevSecOps, or Infrastructure Engineering with a strong security focus.
- Extensive experience integrating automated security gates into CI/CD pipelines (e.g., GitHub Actions, GitLab CI, Jenkins).
- Expertise in scripting and automation languages (e.g., Python, Bash, Go).
- Expertise with major cloud platforms (AWS, Azure, or GCP) and cloud security tooling (e.g., IAM, Security Hub, GuardDuty).
- In-depth knowledge of infrastructure as code tools.
- Excellent communication, incident handling, and cross-team collaboration skills.
Shift-Left Security Integration:
- Implement automated static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), and secrets detection into existing build pipelines to catch vulnerabilities early.
- Secrets & Identity Management: Design, deploy, and manage enterprise secrets management solutions (e.g., HashiCorp Vault, AWS Secrets Manager) and enforce strict Least Privilege Access via IAM policies and Zero Trust architecture.
- Vulnerability Management & Remediation: Establish continuous vulnerability assessment processes across cloud instances, container registries, and software dependencies; collaborate with development teams to triage and patch vulnerabilities based on risk priority.
- Security Monitoring & Incident Response Automation: Partner with Security Operations (SecOps) to build automated threat monitoring, anomaly detection, audit logging, and response capabilities across cloud environments and delivery pipelines.
Benefits- What we offer:
What we offer:
- Plenty of opportunities to grow your career
- Comprehensive medical, dental, and vision benefits
- 3 weeks of vacation plus 5 personal days to recharge
- Employee stock ownership, RRSP program, 401k + matching
- A chance to give back through community involvement
- Flexible work arrangements to suit your lifestyle
- Salary Range: $130,000 - 140,000
About us:
STChealth, founded in 1988, is dedicated to eradicating vaccine-preventable diseases through innovative technology and service solutions. With over 36 years of experience, the company has developed the first Immunization Information System (IIS) and now supports more than a quarter of all vaccinations reported nationwide. STChealth’s platform securely connects consumers, providers, and public health entities, facilitating real-time data exchange to enhance immunization rates and public health responses.
About Harris:
Harris provides mission critical software solutions for the Public Sector, Healthcare, Utilities and Private Sector verticals throughout North America, Europe, Asia and Australia.
Working for Harris is the perfect opportunity to fulfill your professional goals as well as achieve your personal dreams!
Our employees enjoy a casual work environment that offers comfort while providing superior service to our customers. We offer a comprehensive benefit package as well as other additional “Perks”!
- We empower our employees to make a difference
- We have an award-winning culture
- We offer opportunity to learn
- We are financially strong and we are owned by the largest software company in Canada (CSI)
- We have fun!
Originally posted on Himalayas
Prepare your application
Use the description above to assess your fit for Harris. This checklist is guidance from Resumize, rather than additional requirements from the employer. Imported listings can be shortened or change after collection, so confirm the complete description and current availability before sending an application.
Match requirements to evidence
Identify the responsibilities and skills the employer explicitly names. For each important requirement, choose one example from your work, education, training, or projects. Explain what you did, how you did it, and what changed as a result. Include a measurable outcome when you can support it. If you lack a requirement, describe related experience accurately instead of adding an unfamiliar skill to your resume.
Put the most relevant examples near the top of your resume. Keep job titles, dates, qualifications, and contact details consistent across your application materials. Use the employer’s terminology when it describes your experience accurately; a copied list of keywords does not explain your contribution. A short, specific bullet is easier to review than a paragraph that mixes several unrelated duties.
Check the working arrangement
Confirm the location, schedule, employment type, and any eligibility requirements on the employer’s site. A remote label does not establish worldwide eligibility or flexible hours. If compensation, benefits, equipment, travel, or contract duration are missing from this listing, write down your questions for the recruiter. Do not assume details from another opening at the same company apply to this role.
Review before submitting
Follow the employer’s requested file format and application instructions. Open your exported resume and check that its text is selectable, its sections read in order, and its links work. Proofread names, dates, and contact information. Share confidential work samples only when you have permission, and use an anonymized example when necessary.
Submit through a trusted employer or recruiting destination. If the original listing has disappeared, search the employer’s careers page for the title rather than assuming the vacancy remains open. Save the application date, job reference, and the version of your resume you sent. Those details help you prepare for a later conversation and avoid submitting conflicting information through several job boards.
Review your resume for writing and readability feedback, or browse other openings if this opportunity is unavailable.