Cloud Engineer

Mechanicode is seeking a mid-level Azure DevSecOps Engineer to build security and automated testing into every phase of the software delivery lifecycle for federal systems. The role focuses on Java applications, Terraform-managed infrastructure, and secure CI/CD pipelines across hybrid environments, while collaborating with development, operations, security, and product teams.

Responsibilities:

• Design, build, configure, and monitor the DevSecOps toolchain and CI/CD pipelines for Java applications
• Provision and manage cloud and on-prem infrastructure using Terraform, applying security best practices
• Integrate security testing tools (SAST, DAST, SCA, fuzz testing) into pipelines to detect vulnerabilities early
• Help define and carry out the automated testing strategy across pipelines, covering functional, performance, and security tests
• Define and implement test coverage metrics, quality gates, and pass/fail criteria that enforce security and compliance standards
• Enable product teams to create and maintain their own test plans, test data, and test cases, and drive "shift-left" testing practices
• Maintain traceability between work items, code, test cases, security requirements, risk mitigations, and releases
• Document test processes, test data management, automated test infrastructure, and standard operating procedures
• Report on testing outcomes, vulnerabilities, and quality trends to engineers, oversight managers, and leadership
• Research emerging DevSecOps tools and practices and share them with the team and wider development community

Requirements:

• Must be a U.S. citizen or green card holder
• 4+ years of experience across software development, IT operations, and security (DevSecOps, DevOps, SRE, or similar roles)
• Hands-on Java development experience, including building, testing, and securing Java applications
• Hands-on Terraform experience provisioning and managing cloud infrastructure as code
• Experience building and maintaining CI/CD pipelines with integrated security scanning, versioning, and automated testing
• Experience working in hybrid environments (on-prem plus one or more cloud platforms)
• Working knowledge of security frameworks and principles such as Zero Trust, AppSec, NIST 800-53 control families, and audit and logging requirements (OMB M-21-31)
• Strong written and verbal communication skills, including experience briefing senior-level stakeholders
• Bachelor's degree in computer science, engineering, or a related field, or an equivalent combination of education and experience
• Experience with additional languages or technology stacks beyond Java
• Experience with IT Service Management (ITSM) practices alongside Agile delivery
• Experience with container and Kubernetes security scanning
• Experience with observability and logging platforms (Splunk, Elastic, Grafana, Prometheus)
• Experience using agentic coding tools (Claude Code, Codex, GitHub Copilot) for applications or infrastructure automation
• Security, cloud, or Terraform certifications (Security+, CISSP, AWS, Azure, HashiCorp)