Senior DevSecOps Engineer

Join Our Team! We have a great team of friendly, talented and inspiring people at First United. As a learning organization, we take pride in offering exciting opportunities for employees to grow and follow their passions.

That's one of the many reasons First United has been voted as one of the top places to work in Oklahoma since 2009! Browse this page to find out more about the First United culture and the many benefits of working here. Then, use our "Get Started" section to take your first step to being a part of First United.

The Position Job TitleSenior DevSecOps Engineer Job Description Position Overview We are seeking an experienced Senior DevSecOps Engineer to join our Platform Engineering team.

In this role, you will

• be responsible for architecting, implementing, and maintaining comprehensive security controls across our entire CI/CD pipeline and Kubernetes infrastructure.
• This position reports to the Director of Platform Engineering and plays a critical role in ensuring our organization meets Federal Reserve cybersecurity requirements and CRI (Cyber Risk Institute) profile compliance while enabling rapid, secure application delivery.
• Primary Responsibilities CI/CD Pipeline Security & Governance · Design, build, and manage secure CI/CD pipelines using Azure DevOps and GitHub Advanced Security · Implement and enforce security gates, policy-as-code controls, and approval workflows at every pipeline stage · Integrate vulnerability scanning tools (SAST, DAST, SCA, container scanning) and aggregate findings into centralized reporting dashboards Vulnerability Management · Operationalize security scanning across multiple tools (GitHub Advanced Security, SonarQube, etc.)
• · Build automated workflows to correlate, deduplicate, and prioritize vulnerability data from disparate sources Runtime Security & Kubernetes Policy Enforcement · Implement Kyverno policies to enforce container image security, network policies, and runtime constraints · Design and deploy Kubernetes Pod Security Standards, network policies, and RBAC configurations · Manage container image scanning, signing, and attestation in Azure Container Registry (ACR) Zero Trust Architecture & Access Control · Lead the design and implementation of zero trust security principles across infrastructure and applications · Implement workload identity and managed identity solutions in Azure for application-to-service authentication · Design network segmentation, microsegmentation policies, and encrypted inter-service communication AI-Augmented Security Operations · Identify, evaluate, and operationalize AI-powered security tools across the SDLC — code review assistants, automated triage agents, anomaly detection — establishing review patterns, prompt and policy controls, and audit trails appropriate to a regulated environment · Define and enforce secure usage standards for AI coding assistants and agentic developer tools (data handling, secret-leak prevention, model and provider governance, validation of model output) · Build internal automations using LLMs and MCP-style integrations to reduce toil in vulnerability triage, policy authoring, evidence collection for audits, and incident response Required Qualifications Experience · 5+ years of software development, DevOps, or security engineering experience · 5+ years of dedicated security or DevSecOps practice · 3+ years of hands-on experience building and maintaining CI/CD pipelines at scale · 3+ years of Kubernetes administration, security hardening, or platform engineering experience Technical Skills · CI/CD Platforms: Deep expertise in Azure DevOps and/or GitHub Actions · GitHub Security Suite: Hands-on background with GitHub Secret Protection (secret scanning and push protection) and GitHub Code Security (code scanning, Dependabot, security overview); experience tuning detections, triaging alerts, enforcing repository-level policies at scale, and integrating findings into pipeline gates · Kubernetes: Expert-level knowledge of Kubernetes architecture, security, and operational management in AKS · Container Security: Hands-on experience with container image scanning, signing, and registry security · Policy Engines: Hands-on experience with Kyverno (or equivalent: OPA/Gatekeeper, Kubewarden) · Azure Platform: Proficiency with Azure services including AKS, ACR, Key Vault, Azure Policy, Azure DevOps · Scripting & Automation: Strong scripting skills in PowerShell, Bash, Python, or Go · Infrastructure as Code: Strong Terraform skills including module design, state management, and policy testing; experience codifying security baselines as reusable infrastructure blueprints (Terraform modules and/or Azure Blueprints) to enforce guardrails at provisioning time · AI Tooling: Hands-on experience using AI coding assistants (e.g., GitHub Copilot, Claude Code, Cursor) to accelerate secure development; comfort evaluating, integrating, and operating AI-assisted security tooling — AI-driven SAST, agentic vulnerability triage, MCP-based pipeline automations — with appropriate guardrails for a regulated environment Preferred Qualifications · Zero Trust Architecture: Hands-on design and implementation of zero trust models in production environments · Supply Chain Security: Experience with SBOM generation, attestation, provenance · Certifications: CKS, AZ-500, AWS Security, CCSK, CISSP · Prior experience in banking, financial services, or other highly regulated industries Success Metrics & KPIs · 100% of applications scanned before production deployment; zero critical or high vulnerabilities in production pipeline · Compliance with SLA for critical/high/medium/low vulnerability remediation · Achieve advanced maturity in zero trust architecture implementation · Maintain control effectiveness rating in regulatory examinations NOTE: This job description is not intended to be all-inclusive.
• Employee may perform other related duties as assigned by supervisor to meet the ongoing needs of the organization.
• All Locations:Plano-Parkwood II If any applicant is unable to complete an application or respond to a job opening because of a disability, please email us at [email protected] for assistance.
• First United is an Equal Opportunity Employer.
• To the extent required by Federal or State law, First United does not discriminate in employment opportunities or practices on the basis of race, color, religion, sex, national origin, or any other characteristic protected by law.
• First United Bank is a family-friendly organization with strong ties to the communities we serve.
• We practice honesty, integrity, and exceptional customer service as we strive to be the best place, to bank, work and invest.
• We are committed to providing excellent career opportunities and a wide array of benefits for our staff.
• And, in recognition of First United's commitment to being a premier employer, we've been honored by OKCBiz Magazine as a "Best Places to Work" organization.
• As one of only 30 organizations and companies to receive this prestigious designation, we're very proud of our accomplishment!
• The key to First United's success is, and always will be, our exceptional people.
• Our employees share a desire to provide the best possible service to our customers and they work creatively, set high standards for themselves, and stick to them.
• Please take time to browse our open positions and if you find something that matches your interest and qualifications, you can apply right here online.
• We look forward to meeting you and wish you the best in your career!.