DevSecOps Engineer

What you'll do

• Engineer end-to-end automation solutions using GitLab CI, AKS, Terraform, and Ansible with integrated security controls.
• Deploy and manage containerized workloads on Azure Kubernetes Service (AKS) while enforcing Azure Policy and RBAC.
• Build and maintain CI/CD pipelines that integrate SAST, DAST, and dependency scanning for secure deployments.
• Design and secure Model Context Protocol (MCP) servers to provide data sources and APIs for AI agents.
• Implement OAuth 2.0 and OpenID Connect authentication flows using Microsoft Entra ID for secure service access.
• Develop agentic workflows that allow AI agents to interact with Azure infrastructure and GitLab CI pipelines.
• Deploy and manage LLM-based assistants and AI models in production environments while ensuring model trust boundaries.
• Apply prompt engineering and RAG techniques to ground AI agents with real-time enterprise context.

What we're looking for

• U.S. citizenship is required.
• Bachelor's degree in Software Engineering or a related STEM field, plus 8 years of experience, or a Master's degree plus 6 years of experience.
• Experience building end-to-end automation solutions using GitLab CI, AKS, Terraform, and Ansible with integrated security controls (preferred).
• Expertise deploying containerized workloads on AKS and automating Azure infrastructure with Terraform and Ansible in an AIOps environment (preferred).
• Experience building CI/CD pipelines integrating SAST, DAST, dependency scanning, and AI-powered tooling for Azure environments (preferred).
• Experience designing and securing MCP servers on Azure using App Service, Container Apps, or AKS (preferred).
• Familiarity with OAuth 2.0 / OpenID Connect authentication flows within MCP servers using Microsoft Entra ID (preferred).
• Experience building agentic workflows, integrating AI/ML models, and utilizing RAG and prompt engineering in production environments (preferred).