高级Azure DevSecOps工程师

WHAT WE DO
Founded in 2007, Growth Acceleration Partners (GAP) is a consulting and technology services company. We consult, design, build and modernize revenue-generating software and data engineering solutions for clients. With modernization services and AI tools, we help businesses achieve a competitive advantage through technology. GAP’s remote, integrated engineering teams use end-to-end solutions to innovate and align with your business goals. We have 600+ English-speaking engineers based in Latin America and approximately 20 U.S.-based engineers. With some of the highest customer satisfaction scores in the industry, GAP’s focus is customer and employee success.
GAP is a woman-owned company headquartered in Austin Texas. We are a values-based company focused on growing our people by investing in education, onsite English classes and training in the latest technologies, including AI, data analytics and machine learning. Our goal is to provide solutions for our customers that help them achieve critical business outcomes, while enabling our GAPSters and our communities to attain long-term success.
Summary
We are looking for a Senior Azure DevSecOps Engineer to lead the design, implementation, and automation of security controls across our Microsoft Azure cloud ecosystem and CI/CD pipelines. In this high-impact role, you will embed security into every phase of the Software Development Lifecycle (SDLC), partnering closely with DevOps, engineering, and product teams to safeguard cloud infrastructure, applications, and APIs. You will combine deep cloud security expertise with modern AI-driven security tools, threat modeling, and automated DevSecOps workflows to proactively defend against evolving threats and ensure continuous platform compliance.
Education
· Bachelor’s Degree in Computer Science, Cybersecurity, Information Technology, Software Engineering, or a related technical field.

Professional Experience

• 7+ years of professional experience in Cloud Security, Application Security, DevSecOps, or Information Security with a strong focus on Microsoft Azure

• Hands-on experience architecting and managing security controls within Azure (Azure AD / Entra ID, Defender for Cloud, Key Vault, Application Gateways)

• Proven track record embedding automated security checks into CI/CD pipelines (Azure DevOps, GitHub Actions, Jenkins) using SAST, DAST, IAST, and dependency scanning

• Demonstrated expertise in threat modeling, vulnerability management, penetration testing, and container/Kubernetes (AKS) security

• Experience using scripting languages (Python, PowerShell, or Bash) to build security automation and log analysis workflows

• Practical experience integrating AI-assisted developer tools (e.g., GitHub Copilot) or AI-powered threat detection and remediation into software delivery practices

Key Responsibilities

• Architect, implement, and maintain enterprise security controls across Azure environments, encompassing IAM, network security, container security, and workload protection

• Embed secure SDLC practices into automated CI/CD pipelines, integrating SAST/DAST/IAST tools, dependency scanning, and OWASP Top 10 compliance checks

• Lead threat modeling assessments, evaluate cloud architecture risks, and design mitigation strategies for microservices, containers, and serverless applications

• Deploy and manage Web Application Firewalls (WAF), API Gateways, and centralized secrets management solutions

• Monitor cloud security events using SIEM, CSPM, and CWPP platforms, assisting in threat hunting and incident response procedures

• Develop and maintain cloud reference architectures, security policies, and automated compliance guardrails

• Leverage AI productivity tools and security scripting (Python, PowerShell, Bash) to automate repetitive security workflows, log analysis, and triage

• Collaborate cross-functionally with engineering teams to mentor developers on secure coding standards and proactive risk reduction

Required Technical Skills
Strong experience in several of the following areas:

• Cloud & Azure Security: Deep technical proficiency with Microsoft Azure, Azure AD / Entra ID, Defender for Cloud, Azure Key Vault, Network Security Groups, and Application Gateways

• DevSecOps & CI/CD Pipelines: Experience integrating automated security testing into Azure DevOps, GitHub Actions, or Jenkins pipelines

• Application Security & Tooling: Secure SDLC methodologies, OWASP Top 10, SAST/DAST/IAST tools, dependency scanning, and container/Kubernetes (AKS) security

• WAF & API Protection: Hands-on experience with Web Application Firewalls (e.g., Cloudflare, F5, Akamai), API Gateways, and secrets management

• Scripting & IaC: Proficient in Python, PowerShell, or Bash for automation, alongside Infrastructure as Code (Terraform or Bicep)

• AI Security Integration: Familiarity with AI-driven security automation, AI code assistants (GitHub Copilot, Cursor), or AI-powered log analysis tools

Nice to Have

• Industry security certifications (e.g., CySA+, Azure Security Engineer Associate AZ-500, CISSP, or CCSP)

• Hands-on experience with Cloud Security Posture Management (CSPM) platforms, SIEM tools, serverless security, and ITSM platforms (e.g., ServiceNow)

• Exposure to securing AI/ML workloads, vector databases, or LLM API endpoints in Azure cloud environments

Soft Skills

• Advanced English proficiency (written and verbal)

• Exceptional analytical, diagnostic, and risk-assessment capabilities

• Strong consultative and communication skills to influence secure design decisions across engineering and business teams

• Proactive mindset with high technical autonomy, accountability, and eagerness to stay ahead of emerging cybersecurity threats

At Growth Acceleration Partners, we're an equal opportunity employer committed to building a diverse and inclusive team. We value everyone's unique background, and we provide equal opportunities regardless of race, color, creed, religion, sexual orientation, gender identity, age, national origin, disability, marital status, veteran status or any other personal right protected by law. We foster a culture of belonging and strive to provide a welcoming environment where everyone feels safe to contribute and grow.
Originally posted on Himalayas