DevSecOps Engineer

We sell used books online! If you like books, and you like working with great engineers, and you love developing, you're probably a great fit for this role.
As a DevSecOps Engineer at ThriftBooks, you will play a pivotal role in integrating devops and security practices into our software development processes. You will create and manage build and release pipelines for both test and production environments, ensuring they are automated, secure, and scalable. You will work closely with developers and IT operations to enhance the stability and security of our software delivery processes.
Key Responsibilities:

• Pipeline Management: Design, implement, and maintain automated CI/CD pipelines for building, testing, and deploying applications both on-prem and in Azure.
• Security Integration: Embed security tools and practices throughout the software development lifecycle (SDLC), including vulnerability scanning, code analysis, and security policies.
• Environment Management: Oversee and manage development, test, and production environments, ensuring smooth operations, security, and availability.
• Infrastructure as Code (IaC): Create and maintain IaC templates (e.g., ARM) for Azure deployments, ensuring consistent and repeatable environments.
• Monitoring & Optimization: Monitor pipeline performance and implement strategies for improvement, ensuring minimal downtime and efficient resource utilization.
• Azure Identity Management: Work with operations to manage user identities, roles, and access controls across different environments.

Required Experience:

• 2+ years' experience managing build, release, and deploy pipelines in both on-premises and cloud environments. Hands-on experience with tools like GitHub Actions, Azure DevOps, or similar platforms is required.

Preferred Qualifications:

• 2+ years of software design and development experience, using C#, JavaScript, Java, or other similar languages
• Experience with infrastructure as code tools like ARM templates, Terraform, or similar.
• Experience embedding security best practices into CI/CD pipelines, including vulnerability scanning, static and dynamic code analysis, and provisioning/protecting appropriate IAM credentials.
• Knowledge of Azure cloud services on-premises infrastructure.
• Familiarity with security best-practice frameworks such as CIS, NIST, ISO.

Remote from AZ or WA, or if you prefer in-person/hybrid, our offices are in the Seattle area!
BASE SALARY:
$110,000- $130,000/yr. This range reflects the good faith hiring base salary range for this position. However, individual salaries are determined by a variety of factors including, but not limited to business considerations, local market conditions, internal equity, as well as candidate qualifications such as skills, experience, and education/training.
WHY YOU'LL LOVE IT HERE:

• Competitive compensation package
• Earn Paid Time Off at Accrual Rate of 15-days per year
• Six Paid Holidays per calendar year
• Medical & Vision Insurance
• Dental Insurance
• Company paid STD/LTD
• Company paid Life Insurance
• Annual bonus incentive
• 401k match program
• Professional development & growth opportunities
• Work with nice, fun people
• FREE BOOKS!

All candidates must be willing to authorize a background check. All applicants agree to ThriftBooks Privacy Notice for Employment-Related Personal Data:
#COR60