Changent · 16 hours ago
DevSecOps Engineer
United States
Full-time
Remote
Mid, Senior Level
$82K/yr - $98K/yr
4+ years expChangent is seeking a DevSecOps Engineer responsible for building, securing, and maintaining cloud infrastructure with a focus on Microsoft Azure. The role involves developing Infrastructure as Code, automating system deployment processes, and implementing security controls to ensure compliance and stability.
Non ProfitHealthcareWellnessHealth Care
Hiring Manager
Jarrod K.
Responsibilities
Convert existing Azure resources into modular, reusable Bicep templates
Develop and maintain IaC for core infrastructure components (e.g., VMs, VNets, NSGs, Firewalls, RBAC)
Build and maintain CI/CD workflows for infrastructure deployments using GitHub or Azure DevOps
Validate changes using safe deployment practices (e.g., “what-if” preview modes)
Maintain current OS and platform versions and implement automated patch management for Azure VMs and remote devices
Build and maintain standardized “golden images” for consistent VM provisioning
Harden identity and infrastructure environments, including Active Directory and Azure RBAC configurations
Evaluate and adopt AI-driven tools and workflows to improve automation, monitoring, and provisioning
Implement Azure Key Vault for secure management of credentials, certificates, and application secrets
Enforce and audit least-privilege access across systems, databases, and services
Configure Conditional Access policies in Azure Entra ID to strengthen authentication controls
Develop monitoring dashboards to track patch compliance, system health, and security posture
Integrate SIEM capabilities and assist in responding to automated alerts and security threats
Support responses to customer and stakeholder security questionnaires and contribute to documentation and process development to meet SOC 2 requirements
Document infrastructure standards, IaC modules, patching procedures, and access models
Share knowledge and collaborate with IT, Data Engineering, Analytics, and Security teams to support joint workflows
Contribute to CI/CD workflows supporting data pipelines and database artifacts
Participate in cross-training within the DevOps team and provide coverage as needed
Qualification
Required
Bachelor's degree in Computer Science, Information Systems, or a related field or relevant professional experience may be considered
Minimum of 4 years' experience in Azure infrastructure engineering, DevOps, or cloud security
Minimum of 3 years' experience using IaC tools such as Bicep, ARM templates, or Terraform
Minimum of 3 years' experience building and maintaining CI/CD pipelines in GitHub or Azure DevOps
Strong knowledge of Azure networking (including VNets, NSGs, Firewalls) and RBAC implementation
Experience with Windows Server administration, automated patching workflows, and compliance tracking
Experience with Azure Key Vault or comparable secrets management tools
Proficiency in PowerShell and/or Azure CLI scripting for automation
Familiarity with EDR or SIEM tooling (e.g., SentinelOne, Adlumin, Microsoft Sentinel)
Ability to evaluate and integrate emerging or AI-assisted technologies to enhance automation and monitoring workflows
Preferred
Experience with Azure SQL performance optimization and/or elastic pool management
Familiarity with Azure Data Factory, Databricks, or orchestration of data pipelines
Experience applying or managing Azure Policy or similar governance frameworks
Experience working in environments handling regulated or sensitive data (e.g., healthcare, nonprofit, SOC 2, HIPAA)
Company
Changent
Changent is a nonprofit organization that specializes in health and well-being services for children and families.
51-200 employees
Funding
Current Stage
Growth StageCompany data provided by crunchbase