DevSecOps Engineer II - SaaS

<p><strong>Overview</strong></p> <p>If you’ve worked at a software company and enjoy building secure, scalable platforms, this DevSecOps Engineer role offers the chance to apply that experience to the world’s largest geospatial Software as a Service offering. In this role, you will help strengthen the security of modern engineering systems by supporting continuous compliance, continuous risk assessment, data encryption, monitoring, and alerting through infrastructure as code practices. We’re looking for a thoughtful, security-minded engineer who understands how software teams build and ship products and is excited to help shape the next generation of secure SaaS at Esri.&nbsp;</p> <p><strong>Responsibilities</strong></p> <ul> <li>Build and maintain secure CI/CD pipelines and automation, using Infrastructure and Automation as Code</li> <li>Develop automation using Python, JavaScript, or similar languages (such as Go, Rust, Ruby)</li> <li>Integrate and administer security tooling (SAST, DAST, SCA) within development pipelines</li> <li>Implement and secure containerized workloads using Docker</li> <li>Define and operate monitoring, logging, and alerting across AWS and Azure</li> <li>Automate provisioning, configuration, and enforcement using AWS and Azure Management APIs</li> <li>Apply secure identity, authentication, and cryptographic practices, including OAuth 2.0, X.509 certificates, and key management</li> <li>Build automated tooling leveraging AI Integration (CoPilot, GPT, Claude, and more) to handle non-deterministic workloads</li> <li>Develop against the Microsoft Fabric Stack (SharePoint, PowerApps, Power Automate, Power BI) with an emphasis on security and automation, along with utilizing GitHub Actions</li> <li>Contribute to secure development standards, operational documentation, and support procedures</li> <li>Work across teams developing Esri’s SaaS, desktop, and enterprise server products, along with the extensions and apps hosted inside of them covering various domains of geospatial data and operations</li> <li>Work across a diverse set of development and CI/CD practices and technologies, utilizing a variety of software languages, to improve their security and compliance</li> </ul> <p><strong>Requirements</strong></p> <ul> <li>2+ years of DevOps or DevSecOps engineering experience, preferably in cloud-based SaaS</li> <li>Experience with DevOps/DevSecOps practices, including IaC and automation-first design</li> <li>Experience building and operating CI/CD pipelines (GitHub Actions, GitLab CI, CircleCI)</li> <li>AI driven exploit discovery &amp; analysis, AI code review</li> <li>Proficiency with Linux and Windows, including Bash and Po