Highlights
The ideal candidate will be able to guide teams on secure CI/CD practices, DevSecOps principles, cloud and hybrid delivery patterns, pipeline security, vulnerability remediation, and audit-ready software delivery practices. 7+ years of experience in DevOps, DevSecOps, platform engineering, cloud engineering, software engineering, infrastructure engineering, site reliability engineering, or a related field.
Numbers & Facts
| Location | Bloomington, IL |
| Industry | Other/Not Classified |
| Company Size | 100 to 499 employees |
| Year Founded | 1998 |
| Website | http://www.avaconsulting.com |
Description
Description:
Primary Responsibilities:
Key Skills and Experience Needed:
Preferred Experience:
- We are looking to hire a Senior DevSecOps Engineer / Coach to help drive the adoption of secure software delivery practices across the enterprise. This role will partner closely with engineering, security, architecture, operations, and governance teams to establish standards, improve software delivery processes, and enable teams to successfully adopt DevSecOps capabilities.
- This is a hands-on senior role that requires both technical depth and strong coaching skills. The ideal candidate will be able to guide teams on secure CI/CD practices, DevSecOps principles, cloud and hybrid delivery patterns, pipeline security, vulnerability remediation, and audit-ready software delivery practices.
- The role is not intended to function only as a governance or compliance checkpoint. It is an enablement-focused position that helps teams meet enterprise security and delivery expectations while minimizing delivery friction.
Primary Responsibilities:
- Drive adoption of DevSecOps practices across engineering teams.
- Partner with development teams to improve secure software delivery processes.
- Help teams integrate automated security and quality controls into software delivery pipelines.
- Provide guidance on Git, GitLab, GitHub, CI/CD, pipeline templates, security scanning, merge request practices, and deployment controls.
- Promote reusable patterns, documentation, reference examples, and enablement materials.
- Partner with security, architecture, operations, compliance, and audit teams to align delivery practices with enterprise controls.
- Support Agile and SAFe delivery practices, including translating DevSecOps improvements into actionable work items and measurable outcomes.
- Influence teams without direct authority by building trusted relationships and providing practical technical guidance.
- Analyze security findings and help teams determine appropriate remediation actions, especially for Critical and High vulnerabilities. Nice to have
- Help teams distinguish actionable security findings from potential false positives. Nice to have
- Support secure application delivery across Microsoft Azure and on-premises environments. Nice to have
- Coach teams on CI/CD pipeline design, secure coding practices, peer review, vulnerability remediation, and shift-left security. Nice to have
Key Skills and Experience Needed:
- 7+ years of experience in DevOps, DevSecOps, platform engineering, cloud engineering, software engineering, infrastructure engineering, site reliability engineering, or a related field.
- Strong hands-on experience with GitLab, GitHub and CI/CD.
- Strong understanding of Git, modern source control practices, merge requests, branching strategies, approvals, and protected branches.
- Experience designing, implementing, and troubleshooting CI/CD pipelines.
- Strong understanding of DevSecOps principles, including secure SDLC, shift-left security, security automation, continuous compliance, separation of duties, and software supply chain security.
- Experience incorporating automated security and quality controls into pipelines.
- Experience analyzing security scanning results and guiding remediation.
- Experience supporting applications deployed in both cloud and on-premises environments.
- Working knowledge of containerization, Docker, artifact management, and secure container practices.
- Experience with enterprise governance, change management, compliance, audit evidence, and control implementation.
- Strong communication, coaching, facilitation, and documentation skills.
- Ability to explain complex technical and security topics to engineers, architects, managers, auditors, and business stakeholders.
- Experience with Azure Container Registry, Artifactory, Docker, Kubernetes, or similar platforms.
- Experience with SAST, DAST, SCA, secrets detection, container scanning, dependency scanning, or infrastructure-as-code scanning.
- Experience with Rally, ServiceNow, Splunk, Dynatrace, or similar enterprise delivery and monitoring tools.
- Familiarity with GitHub workflows and GitHub Advanced Security concepts.
- Ability to Coach on DevSecOps theories and help team implement or change practices based on findings
Preferred Experience:
- Experience mentoring engineers, leading technical enablement, or supporting communities of practice.
- Experience with infrastructure-as-code tools such as Bicep, ARM templates, or Ansible.
- Familiarity with AI-assisted development tools and responsible use of AI in software delivery.
- Strong Microsoft Azure knowledge, including cloud-based application delivery and secure deployment patterns.
About Company
AVA Consulting provides the Best Talent to our clients. Our differentiators include: Strong Management team: helping to improve efficiencies. Deep Expertise: truly professional in their approach/delivery. Proven Track Record: worked with organizations of all sizes. Superior Execution: effective processes and well-trained staff. Long term Fulfilling Partnerships: is what we strive for Programs that fit your needs: with a total flexible approach.