DevSecOps Engineer II - SaaS
Overview:
In this role you strengthen the security of Esri's geospatial SaaS by integrating secure DevSecOps practices across cloud platforms. You will build and automate secure CI/CD pipelines, manage encryption and access controls, and monitor workloads to uphold compliance. You'll collaborate with cross-functional teams to embed security into product development and scale secure, automated workflows. This is a chance to shape the next generation of secure SaaS at Esri and work with modern tooling and AI-enabled automation. Compensation / Benefitsmedical, dental, visionlife insurance 401(k) and profit-sharingvacation leave (80 hours minimum)paid holidays (12 days)professional growth opportunities
Responsibilities:
- Build and maintain secure CI/CD pipelines and automation using Infrastructure as Code
- Develop automation using Python, JavaScript, or similar languages (e.g., Go, Rust, Ruby)
- Integrate and administer security tooling (SAST, DAST, SCA) within development pipelines
- Implement and secure containerized workloads using DockerDefine and operate monitoring, logging, and alerting across AWS and Azure
- Automate provisioning, configuration, and enforcement using AWS and Azure Management APIsApply secure identity, authentication, and cryptographic practices (OAuth 2.0, X.509, key management)
- Build automated tooling leveraging AI Integration to handle non-deterministic workloads
- Develop against the Microsoft Fabric Stack with emphasis on security and automation, plus GitHub Actions
- Contribute to secure development standards, documentation, and support procedures
- Work across teams developing Esri's SaaS, desktop, and enterprise server products and extensions
- Work across diverse CI/CD practices and technologies to improve security and compliance
Key requirements:
- 2+ years of DevOps or DevSecOps experience, preferably in cloud-based SaaSExperience with IaC and automation-first design
- Experience building and operating CI/CD pipelines (GitHub Actions, GitLab CI, CircleCI)AI-driven exploit discovery & analysis, AI code review
- Proficiency with Linux and Windows, including Bash and PowerShellHands-on experience with Terraform and Ansible
- Experience integrating and automating web and cloud APIsExperience administering security tools and integrating them into pipelines
- Strong understanding of package management, dependency control, and supply-chain security
- Experience with Docker and container-based workflows
- Proficiency with Git/GitHub, including branching and code reviews
- Experience implementing monitoring, logging, and alerting in cloud environments
- Experience applying secure development practices in a SaaS environment
- Bachelor's degree in Computer Science, Engineering, Information Systems, Data Science, or related fieldstrong collaboration and communicationsecurity-minded thinkingproblem-solving orientation
- DevSecOpsCI/CD (GitHub Actions, GitLab CI, CircleCI)
- Infrastructure as Code (Terraform, Ansible)