{"id":3032186,"url":"https://alion.io/job/towne-devsecops-engineer","title":"DevSecOps Engineer","company":{"id":2597116,"name":"Towne","domain":"towne.com","url":"https://alion.io/company/towne-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":56000,"max_usd":119000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":61},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Azure AKS","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Bicep","optional":false},{"name":"Checkov","optional":false},{"name":"CI/CD","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PCI DSS","optional":false},{"name":"PowerShell","optional":false},{"name":"Progressive Delivery","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"tfsec","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Vault","optional":false},{"name":"VPN","optional":false},{"name":"Zero Trust","optional":false},{"name":"Kubernetes","optional":true}],"status":"live","first_seen_at":"2026-06-24T00:00:00Z","employer_posted_date":"2026-06-24","last_verified_at":"2026-10-22T15:33:36Z","board_verified":true,"closed_at":null,"days_open":120,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":120},"description":"At Towne Park, it’s more than a job, you can make an impact.\nA career with us is rewarding in more ways than one.\nAs a hospitality services company, our commitment is to create smiles by delivering exceptionalexperiences. When you work with us, you have an opportunity to impact the millions of patients, visitors and guests we proudly serve. Whether providing compassionate service that eases the anxiety of a patient and their family, creating a memorable experience for a guest in a new city, or helping a colleague, every day is a new opportunity to brighten someone else’s day and make an impact. When we see a customer, a client or one of our own team members smile, we know we made an impact. It’s why we do what we do.\nTowne Park is a place where you can make a difference and create smiles every day.\nClick here for important notices that may be applicable to you.\nFor more information about our privacy policy, please click here.\nDevSecOps Engineer will own how software ships and how our cloud infrastructure stays secure - from pipeline to production.This is a hands-on, end-to-end ownership role. Will design and operate our Azure CI/CD pipelines, codify our infrastructure and security policies, and drive remediation of security findings across the environment. Will work directly with application engineers and leadership.\nESSENTIAL FUNCTIONS\nReasonable accommodations may be made to enable individuals with disabilities to perform all functions.\nCI/CD & Release Engineering (Azure DevOps) 20%\nDesign, build, and maintain CI/CD pipelines in Azure DevOps (YAML pipelines) for application and infrastructure deployments\nImplement multi-stage release workflows with environment promotion (dev → staging → production), approval gates, and automated rollback\nEstablish branch policies, PR validation builds, and quality gates (test coverage, build health)\nOwn deployment reliability: zero-downtime deployment patterns (blue/green, canary), release cadence, and deployment metrics (lead time, change failure rate, MTTR)\nManage build agents, artifact feeds, and container registries (ACR)\n2. Infrastructure as Code (20%)\nPartner closely with engineering teams to integrate security into development workflows without reducing delivery velocity.\nDevelop secure coding guidance, reusable security patterns, and self-service security capabilities.\nSupport security champion programs and security awareness initiatives for technical teams.\nAuthor and maintain all cloud infrastructure as code using Terraform and/or Bicep - no click-ops in production\nBuild reusable IaC modules for common patterns (networking, app services, databases, key vaults)\nImplement state management, drift detection, and plan/apply review workflows integrated into pipelines\nManage environment parity and configuration across dev, staging, and production\nDrive cost visibility and right-sizing through tagging standards and IaC-enforced resource policies\n3. Policy as Code & Governance 3 (25%)\nDefine and enforce guardrails using Azure Policy (built-in and custom definitions) across subscriptions and management groups\nImplement policy-as-code workflows so governance changes go through version control and CI, not the portal\nEnforce standards automatically: allowed regions and SKUs, mandatory encryption, network restrictions, required tags, diagnostic settings\nIntegrate compliance scanning into pipelines (e.g., Checkov, tfsec, PSRule) so non-compliant infrastructure fails before deployment\nAutomate collection and reporting of security control evidence to support compliance and audit requirements.\nMaintain audit-ready documentation and technical control mappings across applicable regulatory frameworks.\nMaintain audit-ready evidence of control enforcement to support SOC 2 / PCI DSS compliance efforts\n4. Security Operations & Remediation (25%)\nFacilitate threat modeling exercises for applications, cloud services, APIs, and infrastructure platforms.\nIdentify security design risks early in the software development lifecycle and recommend mitigation strategies.\nDesign and implement secure network architectures including segmentation, private networking, web application firewalls (WAF), and cloud-native security controls.\nMonitor and remediate network exposure risks and cloud security misconfigurations.\nSupport secure connectivity models including VPN, private endpoints, service meshes, and zero-trust networking architectures.\nOwn vulnerability management end to end: scanning (SAST, dependency/SCA, container image, DAST), triage, severity-based remediation SLAs, and tracking to closure\nRemediate infrastructure-level findings directly (misconfigurations, patching, network exposure, identity over-permissioning); route application-code findings to engineering teams with clear severity, context, and deadlines\nAdminister secrets management (Azure Key Vault) - no secrets in code, pipelines, or configuration files\nImplement and tune Microsoft Defender for Cloud and security monitoring/alerting; lead initial response and containment for security incidents\nManage identity and access: Entra ID, RBAC least-privilege reviews, service principals/managed identities, PIM for elevated access\nHarden the network layer: NSGs, private endpoints, WAF, segmentation between environments\n5. Feature Delivery Enablement (10%)\nImplement feature flag infrastructure (e.g., Azure App Configuration / LaunchDarkly) to decouple deployment from release\nSupport progressive rollouts, A/B exposure controls, and kill switches for safe feature launches\nPartner with application engineers to make shipping fast and safe - your job is to remove friction, not add gates\nSupport feature flag platforms and progressive delivery capabilities to enable secure, controlled feature releases.\nImplement kill-switch and rollback mechanisms to reduce deployment risk.\nQUALIFICATIONS\nEducation:\nB.S. or Major in Computer Science\nRequired Licensure, Certification, etc.:\nPreferred: AZ-400, AZ-500, or equivalent\nWork Experience:\n5+ years in DevOps/SRE/Platform roles, with at least 2 years of hands-on security ownership (DevSecOps, AppSec, or CloudSec)\nKnowledge & Skills:\nDeep, demonstrable Azure experience: App Services / AKS / Functions, networking, Entra ID, Key Vault, Defender for Cloud\nExpert with Azure DevOps: YAML pipelines, release management, branch policies, artifact management\nProduction experience with Terraform or Bicep (both a plus), including module design and state management\nHands-on experience with Azure Policy or equivalent policy-as-code tooling (OPA/Rego, Sentinel, Checkov, PSRule)\nProficiency in at least one scripting language (PowerShell, Python, or Bash)\nTrack record of remediating security findings yourself - not just filing tickets\nStrong communication: able to explain risk in business terms and influence engineers without formal authority\nSCOPE\nAuthority to Act: Performs duties independently with minimal supervision, operating from specific and definite directions and instructions. Decisions are of a routine nature made within prescribed operating guidelines, policies and procedures. Mistakes/errors may result in work stoppage, loss of business, poor customer relations and/or damage to product, all of which can have negative financial implications for the organization.\nBudget Responsibility: The employee has control over resources available only.\nWORKING CONDITIONS & PHYSICAL DEMANDS\nThe working conditions and physical demands described here are representative of those that must be met by an associate to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.\nPhysical Requirements\nWhile performing the duties of this job, the employee is regularly required to talk or hear. The employee frequently is required to sit or stand for extended periods of time and may be required to run; walk; handle or feel objects, tools or controls; reach with hands and arms; climb stairs; balance; stoop, kneel, crouch or crawl. Specific vision abilities required by the job include close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus.\nLifting Requirements\nExerting up to 50 pounds of force occasionally, and/or up to 25 pounds of force frequently, and/or greater than 10 pounds of\nForce constantly to move objects.\nWorking Environment\nThe majority of work will be performed in climate-controlled environment, but may be exposed to inclement weather and varying\ndegrees of temperatures on occasion.\nTravel\nTravel of up to 15% may be required.","description_format":"text","description_chars":8630,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Facilities Management","Business Process Outsourcing (BPO)"],"lifecycle":[{"event":"open","at":"2026-10-21T20:33:25Z"}],"visa":[],"liveness":{"score":1,"band":"cold","label":"Long shot","p_open":1,"p_active":0.05,"p_room":0.28,"age_days":120,"expected_fill_days":13,"reasons":["conf:0","win:tail","crowd:junior,brand"],"computed_at":"2026-10-22T06:10:10Z"},"pay":null,"html_url":"https://alion.io/job/towne-devsecops-engineer","json_url":"https://alion.io/job/towne-devsecops-engineer.json","meta":{"generated_at":"2026-10-22T15:38:52Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15493,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2597116},"rest":"https://alion.io/mcp/rest/get_company?id=2597116"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftowne-devsecops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftowne-devsecops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftowne-devsecops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/towne-devsecops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftowne-devsecops-engineer"}]}