DevSecOps Engineer

DevSecOps Engineer
Hybrid - 2 days p week Stamford, CT
6 Months Contract to Hire
Pay: $75 - $80/hr

Our client is an established enterprise in a regulated industry that is building out its Microsoft Azure platform. They are adding an engineer to the team responsible for cloud infrastructure, delivery pipelines, and the security controls built into both.

About the Role
You will build and run the Azure infrastructure and deployment pipelines that the company's applications depend on, with security designed in from the start instead of added afterward. The work sits where cloud engineering, automation, and security meet.
You will work closely with application, infrastructure, security, and project teams to create platform patterns they can reuse, put guardrails into the pipelines, and make sure systems can be monitored and audited. The right person has built Azure environments hands-on, enjoys troubleshooting and automating, and knows how to turn a governance requirement into a working control.

What You Will Do

• Build and run Azure infrastructure and platform services that are secure, resilient, well monitored, auditable, and sensible on cost.
• Create and own CI/CD pipelines with security built in: code and dependency scanning, quality gates, approvals, artifact controls, and managed promotion from one environment to the next.
• Deliver infrastructure as code using Terraform or OpenTofu, publishing reusable modules through the team's platform orchestration tooling so every environment is built the same way.
• Put identity, access, and secrets controls in place with Microsoft Entra ID, RBAC, managed identities, privileged access practices, and Azure Key Vault.
• Set up policy as code and governance guardrails, including Azure Policy, management groups, resource locks, tagging standards, secure baselines, and Microsoft Defender for Cloud.
• Engineer and support a broad set of Azure services across compute and app hosting (virtual machines, App Service, Functions, Container Apps), containers (AKS, ACR), data (Azure SQL, Storage), integration and messaging (API Management, Service Bus, Event Grid), and private networking.
• Build out monitoring, logging, alerting, dashboards, and runbooks with Azure Monitor, Log Analytics, and Application Insights.
• Serve as L3 escalation support: respond to incidents, dig through system and application logs, complete root cause analysis, and see fixes through.
• Automate deployments, patching, upgrades, and configuration management through scripting.
• Work with project and engineering teams early to shape technical scope, security guardrails, and operational readiness for new initiatives.
• Keep platform standards, runbooks, environment specifications, and deployment records current so operations stay consistent and audit-ready.
• Work within the company's governance, security, privacy, and SOX control requirements, and take part in an after-hours on-call rotation with occasional weekend work.

• Bachelor's degree in Computer Science, IT, Engineering, Cybersecurity, or a related field, or equivalent hands-on experience.
• 5 or more years of hands-on work in DevSecOps, cloud, platform, or infrastructure engineering.
• A record of designing, deploying, and supporting production workloads in Microsoft Azure.
• Experience building and securing CI/CD pipelines in Azure DevOps, including Repos, Pipelines, Artifacts, approvals, environment promotion, and release strategies.
• Strong infrastructure as code skills in Terraform or OpenTofu. Experience with a platform orchestration layer or internal developer platform on top of IaC is a real plus.
• Working knowledge of Azure security and governance: Entra ID, RBAC, managed identities, Key Vault, Azure Policy, and Defender for Cloud.
• Hands-on container experience with Docker, Azure Container Registry, Kubernetes, and AKS.
• Solid Azure networking knowledge, including VNets, subnets, NSGs, Private Endpoints and Private Link, Azure Firewall, Application Gateway/WAF, DNS, and ExpressRoute or VPN.
• Experience standing up observability with Azure Monitor, Log Analytics, Application Insights, alerting, dashboards, and runbooks.
• Time spent in a regulated or audited environment, such as one subject to SOX or similar internal controls.

• A deep grasp of secure software delivery, policy as code, infrastructure as code, and security-by-design.
• Scripting in at least one of PowerShell, Bash, Python, or SQL.
• Strong troubleshooting across cloud services, operating systems, applications, databases, containers, and networks.
• Good judgment in weighing security, scale, resilience, performance, auditability, and cost against each other.
• Thorough knowledge of identity, access, secrets management, secure configuration, and vulnerability reduction.
• The ability to turn governance and security requirements into practical controls, reusable patterns, and automated guardrails.
• Clear written and verbal communication and a collaborative style with application, infrastructure, security, architecture, and project teams.
• Strong analytical, documentation, and planning habits.
• Comfort working independently while keeping stakeholders informed and owning your results.

• Configuration management tools such as Ansible, Chef, or Puppet.
• Kubernetes depth in areas like image governance, cluster networking, ingress, policy enforcement, or cluster upgrades.
• Microsoft SQL Server administration, including high availability, partitioning, and performance tuning.
• Hybrid connectivity, enterprise networking, secure API exposure, or event-driven integration on Azure.
• Experience building reusable landing zone, platform, or application delivery patterns.
• Relevant Azure, DevOps, security, Kubernetes, or infrastructure as code certifications.
• Background in financial services, insurance, or another highly regulated industry.

Welcome to ConsultNet, a premier national provider of technology talent and solutions. Our expertise spans across project services, contract-to-hire, direct search, and managed services onshore, nearshore, and hybrid. For over 25 years, we have connected thousands of consultants with meaningful roles through a personal, communication-driven approach, partnering with a diverse client base to build high-performing teams and create lasting impact. Our comprehensive service offerings cover a wide range of technology and engineering positions across key markets nationwide. Learn more at www.consultnet.com .

We champion equality and inclusivity, proudly supporting an Equal Opportunity Employer policy. We welcome applicants regardless of Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other status protected by law.