We are seeking a highly experienced DevSecOps Engineer (Subject Matter Expert) to lead the design and implementation of secure, scalable CI/CD pipelines and DevSecOps frameworks.

Key Responsibilities

- Design and implement secure CI/CD pipelines with embedded security controls such as SAST, SCA, secrets scanning, and IaC validation
- Build and drive DevSecOps frameworks aligned with organizational governance, compliance, and security standards
- Manage and optimize Azure DevOps pipelines, environments, and approval workflows
- Integrate and enforce security policies using Azure Policy, Defender for Cloud, and Key Vault
- Implement and maintain identity and access management (IAM) including RBAC and least privilege principles
- Collaborate with development, security, and infrastructure teams to ensure secure application delivery
- Promote a security-first culture and provide guidance to engineering teams

Technical Skills & Experience





- Strong hands‑on experience with Azure DevOps (pipelines, repos, releases)
- Expertise in Infrastructure as Code (Terraform, Bicep)
- Deep understanding of cloud security principles in Azure
- Experience with SAST, SCA, secrets scanning, and IaC security tools
- Robust knowledge of identity, RBAC, networking, and cloud security architecture
- Experience with Azure Policy, Defender for Cloud, and Key Vault
- Familiarity with CI/CD best practices and automation frameworks

Zone IT Solutions is an equal opportunity employer and our recruitment process focuses on essential skills and abilities. We encourage applications from a diverse array of backgrounds, including individuals of various ethnicities, cultures, and linguistic backgrounds, as well as those with disabilities.

#J-18808-Ljbffr

📌 DevSecOps Engineer (SME) (City of Sydney)
🏢 Zone IT Solutions
📍 City of Sydney