DevSecOps Engineer
3b staffingAustin (TX)
About the role
Location:
on-site, 6230 E Stassney Ln., Austin, TX 78744 - Onsite interview required - Must be local Sub spots/due date: 5 sub spots, due 9/4 at 5pmJob Responsibilities: The DevSecOps Engineer will support the administration, implementation, maintenance, and adoption of enterprise software development, security, and delivery platforms. This role will serve as a technical subject matter expert responsible for integrating security, automation, and operational best practices into the software development lifecycle (SDLC). The engineer will collaborate with development teams, infrastructure teams, cybersecurity personnel, and business stakeholders to improve software quality, security posture, and delivery efficiency.
Primary Responsibilities:
- Veracode Administration and OnboardingAdminister and maintain the Veracode platform, including user provisioning, role management, policy configuration, and system governance.
- Support onboarding of application teams to Veracode security scanning capabilities.
- Configure and support SAST, DAST, SCA, container, and other application security scanning services.
- Assist development teams with vulnerability remediation activities and security best practices.
- Develop documentation, standards, training materials, and operational procedures.
- SonarQube Administration and OnboardingAdminister and maintain SonarQube environments, projects, quality profiles, quality gates, and user access controls.
- Onboard application teams and integrate SonarQube into CI/CD pipelines.
- Support code quality initiatives and assist teams with remediation of technical debt and code quality issues.
- Establish and maintain enterprise coding standards and reporting metrics.
- GitLab Administration and Maintenance
- Administer and maintain GitLab Self-Managed environments.
- Configure projects, groups, repositories, runners, permissions, integrations, and security settings.
- Perform platform upgrades, maintenance, monitoring, troubleshooting, and capacity management.
- Support source code migration and repository onboarding activities.
- Maintain operational procedures, standards, and platform documentation.
CI/CD Pipeline Development and Automation:
Design, build, maintain, and optimize CI/CD pipelines using GitLab.
Develop reusable pipeline templates and automation frameworks.
Integrate security testing, code quality validation, compliance controls, and deployment automation into software delivery workflows.
Support Infrastructure-as-Code (IaC), automated testing, release management, and deployment processes.
Implement DevSecOps best practices to improve reliability, consistency, and delivery velocity.
Atlassian Jira Administration:
Administer Jira projects, workflows, permissions, issue types, dashboards, reports, and automation rules.
Support project teams with onboarding, configuration, and governance activities.
Configure integrations between Jira and software development platforms including GitLab and other enterprise tools.
Develop reporting and dashboards to improve project visibility and operational metrics.
Must Have:
3 DevSecOps methodologies and best practices3 CI/CD pipeline development and automation3 Source code management and repository administration3 Application security testing tools and practices3 Scripting and automation2 Experience administering and supporting AWS and/or Azure cloud environments, including cloud infrastructure, security, networking, automation, Infrastructure as Code (IaC), container platforms, and CI/CD integrations.
Preferred Skills:
2 Experience administering code suggestion and AI-assisted development platforms2 Experience planning and execution migrations involving source code repositories, CI/CD platforms or DevSecOps toolchains2 Experience supporting application modernization, cloud migration, and DevSecOps tool integrations within cloud-hosted environments is highly desiredN/A Cloud certifications
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.