DevSecOps Engineer II - SaaS
Overview
As a DevSecOps Engineer for the world’s most advanced geospatial information systems company, you will lead the implementation of and support operations for advancing security principles, ensuring continuous compliance, automating risk assessment, data encryption, monitoring, via workflow automation, and consulting with various teams across Esri to help them advance their processes and methodologies. We’re looking for a smart, security-focused engineer to join our Software Security & Privacy team to help push the boundaries of security while putting their mark on Esri’s next-gen SaaS and on-prem offerings.
Responsibilities
- Create, develop, and implement solutions to address infrastructure, platform, application, and SaaS security/compliance requirements
- Create/maintain infrastructure and tools for secure software development and release, such as software analysis tools and automated report generation/alerting from derived data
- Research and recommend tools and practices to improve security of Esri products, such as telemetry and monitoring, secure development patterns, and DevSecOps methodologies
- Consult/assist other teams in adopting and effectively using the tools, practices, and information described above
- Work closely with SaaS DevOps team to engineer and implement cloud security controls
- Provide AWS and Azure Infrastructure/Systems Administration functions
- Contribute to the creation of documentation on recommended practices, procedures, and tools described above
Requirements
- 2+ years of DevOps Engineering experience; experience working in a SaaS environment
- Linux and Windows administration and shells
- Familiarity with cloud provider ecosystems (Amazon AWS & Azure)
- Experience with DevOps tools and concepts such as writing Infrastructure as Code (IaC)
- Ability to perform Continuous Integration and Continuous Delivery (CI/CD), as well as other forms of automation, via modern systems such as GitHub Actions, GitLab, CircleCI, and more
- Familiarity with at least one automation-friendly programming language (Python, TypeScript/JavaScript, Go, Rust, Ruby, and more), or skilled in other languages and willing to expand your horizons
- Ability to define and deploy monitoring, metrics, and logging systems on AWS & Azure
- Experience with using application security validations tools for pentesting, component analysis, static analysis and/or dynamic analysis
- Interest in learning new technologies and techniques as a routine part of the job
- Ability to communicate the need for changes in a collaborative manner while maintaining focus on core objectives
- Bachelor's degree in Computer Science, Engineering, Information Systems, Data Science or a related field, or another technical degree and position-relevant experience.
Recommended Qualifications
- Working knowledge of security risk frameworks (OWASP Top 10, SAN 25, BSIMM)
- Experience with WAF implementation, threat modelling
- Experience with Kubernetes, service mesh, container security
- Familiarity with the Jenkins automation platform
- Familiarity with development languages used for desktop/server application development (C, C++, Java, C#)
- Experience in integrating test and security automation into CI/CD pipelines, like Selenium, GitHub Advanced Security tooling, and pull-request checks.
- Working knowledge of Configuration Management tools such as Chef, Configuration-as-Code such as CloudFormation or Terraform
- Good technical presentation skills
- Working knowledge of Git
- Knowledge of security & privacy frameworks such as FedRAMP, ISO 27001, and GDPR
- Familiarity with Esri software
- Information security or technical certifications such as CISSP, SSCP, GSE, OSCP is desirable
#LI-AL1
#LI-Onsite
Total Rewards
Esri’s competitive total rewards strategy includes industry-leading health and welfare benefits: medical, dental, vision, basic and supplemental life insurance for employees (and their families), 401(k) and profit-sharing programs, minimum accrual of 80 hours of vacation leave, twelve paid holidays throughout the calendar year, and opportunities for personal and professional growth. Base salary is one component of our total rewards strategy. Compensation decisions and the base range for this role take into account many factors including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs.
The Company
At Esri, diversity is more than just a word on a map. When employees of different experiences, perspectives, backgrounds, and cultures come together, we are more innovative and ultimately a better place to work. We believe in having a diverse workforce that is unified under our mission of creating positive global change. We understand that diversity, equity, and inclusion is not a destination but an ongoing process. We are committed to the continuation of learning, growing, and changing our workplace so every employee can contribute to their life’s best work. Our commitment to these principles extends to the global communities we serve by creating positive change with GIS technology. For more information on Esri’s Racial Equity and Social Justice initiatives, please visit our website here.
If you don’t meet all of the preferred qualifications for this position, we encourage you to still apply!
Esri is an equal opportunity employer (EOE) and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability status, protected veteran status, or any other characteristic protected by law. If you need reasonable accommodation for any part of the employment process, please email askcareers@esri.com and let us know the nature of your request and your contact information. Please note that only those inquiries concerning a request for reasonable accommodation will be responded to from this e-mail address.
Esri Privacy Esri takes our responsibility to protect your privacy seriously. We are committed to respecting your privacy by providing transparency in how we acquire and use your information, giving you control of your information and preferences, and holding ourselves to the highest national and international standards, including CCPA and GDPR compliance.
Average salary estimate
If an employer mentions a salary or salary range on their job, we display it as an "Employer Estimate". If a job has no salary data, Rise displays an estimate if available.
As a Senior iOS Engineer at Jump, you will own iOS UX and implementation while contributing to shared Kotlin Multiplatform code to deliver scalable, fan-facing mobile experiences.
Penn Mutual is seeking a seasoned Staff Software Engineer to architect and deliver scalable, secure backend systems and provide technical leadership across cloud-native initiatives.
Autodesk is hiring a Senior Director of Engineering to lead the AEC Data Model engineering organization and drive the technical roadmap for a global, scalable domain data platform.
A hands-on Forward Deployed Engineer role at an AI-native Series A SaaS company, combining field work with production engineering to deliver integrations, features, and technical account ownership.
Senior Full Stack Software Engineer needed to lead development of scalable web applications and cloud infrastructure for a remote product team operating on U.S. business hours.
WHOOP seeks an iOS Engineer II in Boston to develop shared frameworks, design-system components, and internationalization capabilities for its global client platform.
Experienced full-stack engineer needed to design, build, and ship LLM-powered production applications for Chatham Financial’s client and internal platforms.
Experienced systems engineer needed to design and implement high-performance, reliable distributed systems and tooling (primarily Rust) for an AI/HPC platform delivered remotely across the United States.
Synctera is hiring a Senior Backend Engineer (Go) to develop scalable risk and compliance services and integrations that secure fintech, bank, and payments workflows.
Lead a distributed engineering team to design and operate high-performance, real-time discovery systems that power multi-channel personalization and drive measurable business impact.
Riverside Insights is hiring a Senior DevOps Engineer to design, automate, and operate scalable AWS infrastructure for its assessment platforms.
Laminar is hiring an Embedded Software Engineer to develop firmware and secure edge systems that capture and process industrial data to drive sustainability and operational efficiency.
An early-team ML systems engineer role to build reliable, real-world inference and decision pipelines across device and cloud for high-stakes deployments.
Esri is the global market leader in geographic information system (GIS) software, location intelligence, and mapping. Since 1969, we have supported customers with geographic science and geospatial analytics, what we call The Science of Where®. We ...
18 jobs
🔮
Hi, I'm Risa! Your AI Career Copilot
you, just ask me below!
