DevSecOps Engineer

As an Engineer II, DevSecOps at McCormick, you will play a crucial role in designing, implementing, and supporting secure platform and software delivery solutions within Azure environments. Your responsibilities will include: - Designing and implementing DevSecOps solutions and secure CI/CD processes. - Managing CI/CD platforms and code repositories, developing automated pipelines for application deployment and infrastructure provisioning. - Troubleshooting and resolving moderately complex pipeline, automation, or integration issues. - Integrating security controls such as static analysis, dependency scanning, container scanning, and policy validation into CI/CD workflows. - Developing and maintaining reusable Infrastructure-as-Code (IaC) modules and templates to enable secure, standardized, and scalable Azure infrastructure provisioning. - Implementing GitOps and declarative infrastructure deployment models within Azure environments. - Promoting DevSecOps best practices and secure coding standards across engineering teams. - Supporting architecture, capacity, performance, resiliency, and lifecycle planning of DevSecOps toolchains. - Implementing monitoring, logging, and observability within CI/CD and deployment processes. - Contributing to high-availability and disaster recovery strategies for CI/CD and automation platforms. - Providing guidance to less experienced engineers and partnering with stakeholders to support project and operational objectives. Qualifications Required: - Solid engineering knowledge in DevSecOps practices and CI/CD automation within Azure environments. - Experience designing and maintaining CI/CD pipelines using Azure DevOps or GitHub Actions. - Experience integrating security controls into automated pipelines (SAST, DAST, container scanning, secrets management). - Proficiency with Infrastructure-as-Code tools and scripting languages. - Strong understanding of source control management and Git-based workflows. - Ability to independently deliver moderate complexity technical work. - Strong problem-solving and root cause analysis skills. - Ability to participate in technical reviews and recommend improvements. - Effective collaboration across technical and business teams. Additionally, if you have the following qualifications, it would be considered a plus: - Bachelors degree in Computer Science, Engineering, or related field (or equivalent experience). - Microsoft Certified: Azure DevOps Engineer Expert. - Microsoft Certified: Azure Administrator Associate. - Certified Kubernetes Administrator (CKA) or equivalent. - 5+ years of experience in DevOps, DevSecOps, or Platform Engineering roles. - Experience implementing enterprise DevSecOps governance and secure software delivery frameworks. - Experience supporting containerized workloads and Azure Kubernetes Service (AKS). As an Engineer II, DevSecOps at McCormick, you will play a crucial role in designing, implementing, and supporting secure platform and software delivery solutions within Azure environments. Your responsibilities will include: - Designing and implementing DevSecOps solutions and secure CI/CD processes. - Managing CI/CD platforms and code repositories, developing automated pipelines for application deployment and infrastructure provisioning. - Troubleshooting and resolving moderately complex pipeline, automation, or integration issues. - Integrating security controls such as static analysis, dependency scanning, container scanning, and policy validation into CI/CD workflows. - Developing and maintaining reusable Infrastructure-as-Code (IaC) modules and templates to enable secure, standardized, and scalable Azure infrastructure provisioning. - Implementing GitOps and declarative infrastructure deployment models within Azure environments. - Promoting DevSecOps best practices and secure coding standards across engineering teams. - Supporting architecture, capacity, performance, resiliency, and lifecycle planning of DevSecOps toolchains. - Implementing monitoring, logging, and observability within CI/CD and deployment processes. - Contributing to high-availability and disaster recovery strategies for CI/CD and automation platforms. - Providing guidance to less experienced engineers and partnering with stakeholders to support project and operational objectives. Qualifications Required: - Solid engineering knowledge in DevSecOps practices and CI/CD automation within Azure environments. - Experience designing and maintaining CI/CD pipelines using Azure DevOps or GitHub Actions. - Experience integrating security controls into automated pipelines (SAST, DAST, container scanning, secrets management). - Proficiency with Infrastructure-as-Code tools and scripting languages. - Strong understanding of source control management and Git-based workflows. - Ability to independently deliver moderate complexity technical work. - Strong problem-solving and root cause analysis skills. - Ability to participate in technical reviews and