Sr DevSecOps Engineer / Coach

AVA Consulting is seeking a Sr DevSecOps Engineer / Coach

Location: Bloomington, IL

U.S. Citizens and those authorized to work in the U.S. are encouraged to apply. We are unable to sponsor at this time.

Description:

• We are looking to hire a Senior DevSecOps Engineer / Coach to help drive the adoption of secure software delivery practices across the enterprise. This role will partner closely with engineering, security, architecture, operations, and governance teams to establish standards, improve software delivery processes, and enable teams to successfully adopt DevSecOps capabilities.
• This is a hands-on senior role that requires both technical depth and strong coaching skills. The ideal candidate will be able to guide teams on secure CI/CD practices, DevSecOps principles, cloud and hybrid delivery patterns, pipeline security, vulnerability remediation, and audit-ready software delivery practices.
• The role is not intended to function only as a governance or compliance checkpoint. It is an enablement-focused position that helps teams meet enterprise security and delivery expectations while minimizing delivery friction.

Primary Responsibilities

• Drive adoption of DevSecOps practices across engineering teams.
• Partner with development teams to improve secure software delivery processes.
• Help teams integrate automated security and quality controls into software delivery pipelines.
• Provide guidance on Git, GitLab, GitHub, CI/CD, pipeline templates, security scanning, merge request practices, and deployment controls.
• Promote reusable patterns, documentation, reference examples, and enablement materials.
• Partner with security, architecture, operations, compliance, and audit teams to align delivery practices with enterprise controls.
• Support Agile and SAFe delivery practices, including translating DevSecOps improvements into actionable work items and measurable outcomes.
• Influence teams without direct authority by building trusted relationships and providing practical technical guidance.
• Analyze security findings and help teams determine appropriate remediation actions, especially for Critical and High vulnerabilities. Nice to have
• Help teams distinguish actionable security findings from potential false positives. Nice to have
• Support secure application delivery across Microsoft Azure and on-premises environments.
• Nice to have
• Coach teams on CI/CD pipeline design, secure coding practices, peer review, vulnerability remediation, and shift-left security. – Nice to have

Requirement:

Required Skills:

• 7+ years of experience in DevOps, DevSecOps, platform engineering, cloud engineering, software engineering, infrastructure engineering, site reliability engineering, or a related field.
• Strong hands-on experience with GitLab, GitHub and CI/CD.
• Strong understanding of Git, modern source control practices, merge requests, branching strategies, approvals, and protected branches.
• Experience designing, implementing, and troubleshooting CI/CD pipelines.
• Strong understanding of DevSecOps principles, including secure SDLC, shift-left security, security automation, continuous compliance, separation of duties, and software supply chain security.
• Experience incorporating automated security and quality controls into pipelines.
• Experience analyzing security scanning results and guiding remediation.
• Experience supporting applications deployed in both cloud and on-premises environments.
• Working knowledge of containerization, Docker, artifact management, and secure container practices.
• Experience with enterprise governance, change management, compliance, audit evidence, and control implementation.
• Strong communication, coaching, facilitation, and documentation skills.
• Ability to explain complex technical and security topics to engineers, architects, managers, auditors, and business stakeholders.
• Experience with Azure Container Registry, Artifactory, Docker, Kubernetes, or similar platforms.
• Experience with SAST, DAST, SCA, secrets detection, container scanning, dependency scanning, or infrastructure-as-code scanning.
• Experience with Rally, ServiceNow, Splunk, Dynatrace, or similar enterprise delivery and monitoring tools.
• Familiarity with GitHub workflows and GitHub Advanced Security concepts.
• Ability to Coach on DevSecOps theories and help team implement or change practices based on findings

Preferred Skills:

• Experience mentoring engineers, leading technical enablement, or supporting communities of practice.
• Experience with infrastructure-as-code tools such as Bicep, ARM templates, or Ansible.
• Familiarity with AI-assisted development tools and responsible use of AI in software delivery.
• Strong Microsoft Azure knowledge, including cloud-based application delivery and secure deployment patterns

NOTE: Interested Candidates can apply by sending their Updated Resume and Contact Details.

Ron Tolson

AVA Consulting

Fax:

Web: