> Markdown version of [/jobs/ext/2591177-devsecops-engineer-azure](https://www.wearedevelopers.com/jobs/ext/2591177-devsecops-engineer-azure). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # DevSecOps Engineer (Azure) - **Company:** Spectraforce - **Location:** Chicago, IL, United States - **Experience:** Expert - **Contract:** Temporary contract - **Skills:** Application Programming Interfaces (APIs), Amazon Web Services, Audit Trail, Microsoft Azure, Cloud Storage, Computer Programming, Continuous Integration, Github, Issue Tracking Systems, Information Management, Python (Programming Language), Key Management, Log Analysis, Network Planning and Design, Node.Js, NoSQL, OAuth, Redis, Kusto Query Language, Zero Trust Network Access, Systems Integration, Management of Software Versions, Extensible Markup Language (XML), Azure Service Bus, Data Ingestion, Rate Limiting, Information Technology, RSA Archer Platform, Cosmos DB, Api Design, Terraform, Devsecops, Api Management, Serverless Computing, Key Vault, Vulnerability Analysis - **Published:** August 1, 2026 - **Apply:** http://leoforce.us/Careers/Spectraforce/JobDetails.html?jobid=9a3479fb-6089-441a-9be3-39f195bce520&OrgId=1&UserId=1485 ## About the Role * 5+ years building production workloads on Azure; demonstrated experience with event-driven and API-first architectures * Strong APIM experience: policies (inbound/outbound XML), backends, named values, developer portal, versioning * Experience implementing immutable/append-only storage patterns - WORM blob policies, Cosmos DB change feed auditing, or equivalent * Deploy and Manage NoSQL and CosmosDB database experience * Solid Terraform skills: modules, remote state, Azure Provider, CI/CD integration via GitHub Actions or Azure DevOps * Strong coding experience in Python and Node * Familiarity with envelope encryption patterns using Key Vault (CMK, key rotation, purge protection) * Understanding of zero-trust network design: Private Endpoints, VNet integration, NSG/UDR patterns * Ability to write KQL for operational queries, alerting rules, and audit log analysis * Experience integrating with third-party tool APIs (GRC platforms, vulnerability scanners, ticketing systems, or similar) * Hands-on proficiency with integrated testing tools * Effective written and verbal communication skills to collaborate with cross-functional teams * Desired certifications such as Azure Security Engineer Associate certification, and AWS-certified security - Specialty, CISSP and CCSP * Degree in Computer Science, Information Management, or related field preferred ## Description * Design and implement API ingestion pipelines via Azure API Management (APIM) with OAuth2/JWT validation, rate limiting, and schema enforcement * Build event-driven ingestion workflows using Azure Service Bus and Azure Functions (durable, fan-out patterns) * Implement immutable artifact storage using Azure Blob Storage with WORM policies (time-based retention locks) and Azure Cosmos DB for tamper-evident metadata indexing * Architect Redis Cache for high-throughput query caching while preserving source-of-truth immutability guarantees * Integrate Azure Key Vault for envelope encryption of stored artifacts (customer-managed keys, automated rotation) * Build Log Analytics Workspace telemetry pipelines covering ingestion events, access audit trails, and integrity verification logs * Write Terraform IaC for all infrastructure - no click-ops; all resources policy-as-code compliant * Implement third-party tool integrations (connector APIs) to ingest evidence artifacts from source systems ## Related Videos - [Leveraging Real time data in FSIs](https://www.wearedevelopers.com/videos/806-leveraging-real-time-data-in-fsis) - [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security) - [Reducing LLM Calls with Vector Search Patterns - Raphael De Lio (Redis)](https://www.wearedevelopers.com/videos/1714-reducing-llm-calls-with-vector-search-patterns-raphael-de-lio-redis) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) - [Accelerating Authentication Architecture: Taking Passwordless to the Next Level](https://www.wearedevelopers.com/videos/733-accelerating-authentication-architecture-taking-passwordless-to-the-next-level) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [DevOps Engineer Salary [2023]](https://www.wearedevelopers.com/magazine/203-devops-engineer-salary-2023) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)