A leading U.S. law firm is seeking a DevSecOps Engineer to support its citizen development initiatives, based in any of its offices in Boston, New York, San Francisco, Santa Monica, Seattle, Silicon Valley, or Washington DC.

The role bridges business-driven innovation and enterprise engineering standards, partnering with analysts, business users, and rapid prototypers to transition experimental applications into secure, production-ready solutions. Responsibilities include refactoring and hardening applications built with Python, JavaScript, and low-code platforms; establishing SDLC best practices such as source control standards, CI/CD pipelines, and environment separation; building reusable DevSecOps templates and secure configuration patterns; conducting security-focused code reviews; integrating automated tooling like SAST, dependency scanning, and secrets detection; and supporting deployments, troubleshooting, and incident response for citizen-developed applications in production.

The ideal candidate has 3+ years of experience in DevOps, DevSecOps, or a related engineering role, with advanced Git and Azure DevOps skills, familiarity with Azure services, and a working knowledge of application security fundamentals. Experience with Infrastructure as Code, containerization, or security tooling like Snyk or Microsoft Defender is a plus. A Bachelor’s degree in Computer Science or related field is preferred. Salary range: $126,000–$189,000, exempt.