DevSecOps Engineer

Required Qualifications

Experience
· Minimum 3 years of experience in DevSecOps methodologies and best practices.
· Minimum 3 years of experience building and maintaining CI/CD pipelines.
· Minimum 3 years of experience with source code management and repository administration.
· Minimum 3 years of experience with application security testing tools and practices.
· Minimum 3 years of experience in scripting and automation.

Technical Skills
· GitLab Administration and CI/CD Pipeline Development
· Veracode Administration (SAST, DAST, SCA, Container Security)
· SonarQube Administration and Code Quality Governance
· Jira Administration and Workflow Automation
· Source Code Management and Repository Governance
· Security Scanning and Vulnerability Remediation
· Infrastructure as Code (IaC)
· Automation and Scripting
· SDLC Security Integration
· DevSecOps Best Practices

Cloud Experience
· Minimum 2 years of experience administering and supporting AWS and/or Azure cloud environments, including:
o Cloud Infrastructure
o Cloud Security
o Networking
o Infrastructure as Code (IaC)
o Container Platforms
o CI/CD Integrations

Preferred Qualifications
· Experience administering AI-assisted development and code suggestion platforms.
· Experience planning and executing migrations involving source code repositories, CI/CD platforms, or DevSecOps toolchains.
· Experience supporting application modernization initiatives.
· Experience supporting cloud migration projects.
· Experience integrating DevSecOps tools within cloud-hosted environments.
· Relevant AWS, Azure, DevOps, Security, or Cloud certifications are highly desirable.

Expected Outcomes
· Successful onboarding and support of development teams to enterprise DevSecOps platforms.
· Increased adoption of automated security and code quality controls.
· Improved software delivery efficiency and standardization across teams.
· Reduced security vulnerabilities and technical debt.
· Enhanced operational stability, compliance posture, and software development maturity.

Position Overview
The Texas Department of Transportation (TXDOT) is seeking an experienced DevSecOps Engineer to support the administration, implementation, maintenance, and adoption of enterprise software development, security, and delivery platforms. The selected candidate will serve as a technical subject matter expert responsible for integrating security, automation, and operational best practices throughout the Software Development Life Cycle (SDLC).
This role requires close collaboration with application development teams, infrastructure teams, cybersecurity personnel, and business stakeholders to enhance software quality, security posture, operational stability, and delivery efficiency.

Key Responsibilities
Veracode Administration & Security Onboarding
· Administer and maintain the Veracode platform, including user provisioning, role management, policy configuration, and governance.
· Support onboarding of development teams to Veracode security scanning services.
· Configure and support SAST, DAST, Software Composition Analysis (SCA), container security, and other application security testing capabilities.
· Assist application teams with vulnerability remediation and secure coding practices.
· Create and maintain operational documentation, standards, procedures, and training materials.

SonarQube Administration & Code Quality Management
· Administer and maintain SonarQube environments, projects, quality profiles, quality gates, and user access controls.
· Integrate SonarQube with enterprise CI/CD pipelines.
· Support development teams in improving code quality and reducing technical debt.
· Establish and maintain enterprise coding standards and reporting metrics.
· Generate quality dashboards and reporting for development leadership.

GitLab Administration & Platform Management
· Administer and support GitLab Self-Managed environments.
· Configure projects, repositories, groups, runners, integrations, permissions, and security settings.
· Perform upgrades, maintenance, troubleshooting, monitoring, and capacity planning activities.
· Support repository migration and source code onboarding efforts.
· Develop and maintain operational procedures and platform documentation.

CI/CD Pipeline Development & Automation
· Design, develop, and maintain GitLab CI/CD pipelines.
· Create reusable pipeline templates and automation frameworks.
· Integrate automated security scanning, code quality checks, compliance controls, and deployment automation.
· Support Infrastructure as Code (IaC), automated testing, release management, and deployment processes.
· Implement DevSecOps best practices to improve delivery speed, reliability, and consistency.
· Drive continuous improvement initiatives across software development workflows.

Atlassian Jira Administration
· Administer Jira projects, workflows, issue types, permissions, automation rules, dashboards, and reporting.
· Support application teams with onboarding and governance activities.
· Configure integrations between Jira, GitLab, and other enterprise development tools.
· Develop customized dashboards and reports to improve project visibility and operational metrics