{bc}
indeed

DevSecOps Engineer

KPMG
Vaughan, CAN
Full-time
Onsite
$74,000 to $111,000
Discovered Yesterday
DevSecOpsSecure Software Development Lifecycle (SSDLC)GitHub Actions and Azure DevOps PipelinesGit and branching strategiesKubernetes and containersTerraform and Infrastructure as Code

Full Job Posting

Role overview

Support enterprise DevSecOps platforms, cloud-native technologies, application security, developer enablement, and software delivery automation.

Focus areas include CI/CD operations, Kubernetes and cloud infrastructure, API management, IaC, security integration, troubleshooting, vendor coordination, and SSDLC improvement.

What you will do

  • Support application security across the SSDLC, including SAST, DAST, SCA, secrets management, vulnerability management, secure coding, and remediation.
  • Administer Azure DevOps and GitHub Enterprise repositories, pipelines, access controls, integrations, governance, and release automation.
  • Develop and support Terraform infrastructure automation, provisioning, configuration, and standardized deployment.
  • Support Azure API Management onboarding, configuration, lifecycle, security policies, governance, and troubleshooting.
  • Assist with Azure resources, AKS, VMs, Key Vault, containers, identity management, and related cloud services.
  • Enable developers through platform and pipeline support, tooling integrations, secure development practices, and onboarding.
  • Track software licensing, utilization, renewals, vendor support cases, escalations, and service commitments.
  • Monitor platform health, support upgrades, troubleshoot incidents, document operations, and contribute to automation, compliance, and continuous improvement.

Required qualifications

  • 2+ years in DevOps, DevSecOps, Application Security, Cloud Engineering, Enterprise Platform Support, or a related field.
  • Strong understanding of SDLC and secure SDLC practices; hands-on GitHub Actions and Azure DevOps Pipelines experience.
  • Experience with Git, repositories, branching strategies, Kubernetes, containers, and cloud-native technologies.
  • Experience with IaC concepts and tools such as Terraform.
  • Understanding of application security, including SAST, DAST, SCA, secrets management, and vulnerability management.
  • Familiarity with Azure, AKS, Key Vault, API Management, and identity and access management.
  • Basic PowerShell, Python, or Bash scripting; analytical troubleshooting and problem-solving skills.
  • Strong communication and documentation skills, customer-focused developer support, and ability to collaborate across technical teams.
  • Written and oral fluency in English is required.

Additional assets

  • Experience with enterprise DevSecOps platforms and developer tools; familiarity with API security, REST APIs, software supply chain security, and cloud security.
  • Exposure to AI-assisted development and automation; OWASP Top 10, secure coding, and governance knowledge are assets.
  • Software licensing, vendor coordination, or ITSM experience such as ServiceNow is beneficial.
  • Relevant Azure, Kubernetes, GitHub, Terraform, or DevOps certifications are considered an asset.

Pay range

  • The stated base salary range is $74,000 to $111,000 for the Ontario region and the same stated range for the NB region; bonus awards may also be available.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at KPMG