DevSecOps Engineer

About the role

• Job Posting Title
• DevSecOps Engineer
• Agency
• 090 OFFICE OF MANAGEMENT AND ENTERPRISE SERV
• Supervisory Organization
• IS-Servers
• Job Posting End Date

Refer to the date listed at the top of this posting, if available. Continuous if date is blank.

Note: Applications will be accepted until 11:59 PM on the day prior to the posting end date above.

• Estimated Appointment End Date (Continuous if Blank)
• Full/Part-Time
• Full time
• Job Type
• Regular

About the role

As a DevSecOps Engineer with OMES you will enjoy

• Generous leave including 15 days of vacation, 15 days of sick leave and 11 paid holidays annually.
• A comprehensive Benefit Package with a generous benefit allowance to offset the cost of insurance premiums for employees and their eligible dependents.

Job Details

• Full-time 40-hour work weeks in office.
• Support the Information Services Division.
• Salary is based on education and experience.
• This is an on-site position located in Oklahoma City, OK.

Position Summary

The DevSecOps Engineer drives the automation, security, and delivery practices that power the Service Operations Team's modern, cross-functional way of working. This role owns infrastructure as code, embeds security and observability into every stage of the delivery pipeline, and continuously improves how the team ships, monitors, and operates services. This is a forward-looking, builder-oriented role for someone energized by solving problems with automation rather than process overhead - someone who brings a can-do attitude to ambiguous problems and treats manual toil as something to eliminate, not manage.

As the organization shifts from a legacy, tiered support model to a flat service operations structure built on end-to-end ownership, the team needs an engineer who can turn operational lessons into automated, self-service, and observable systems. This role is the technical engine behind that shift - replacing manual, reactive work with repeatable, automated, and continuously improving practices.

Beyond technical skill, this role calls for someone with a genuine can-do attitude - comfortable rolling up their sleeves, prototyping a fix rather than waiting for a perfect spec, and treating ambiguity as a starting point rather than a blocker. We're looking for someone who sees automation, security, and observability not as separate disciplines but as one continuous practice of making service operations faster, safer, and more self-sufficient over time.

Key Responsibilities

Automation Engineering & Infrastructure as Code

• Design, build, and maintain infrastructure as code (IaC) using tools such as Terraform, Ansible, or equivalent, replacing manual provisioning and configuration with version-controlled, repeatable automation.
• Build self-service tooling and pipelines that let SOT staff provision, deploy, and remediate common issues without engineering intervention.
• Continuously identify manual, repetitive operational tasks and automate them, treating toil reduction as an ongoing responsibility rather than a one-time project.

Rapid, Secure Delivery

• Own and evolve CI/CD pipelines to enable fast, frequent, low-risk releases, embedding security scanning and policy-as-code checks directly into the pipeline rather than as a separate gate.
• Partner with development and operations staff to shrink lead time from code commit to production, removing bottlenecks wherever they appear.
• Champion a shift-left security mindset, building guardrails that let teams move fast safely rather than relying on after-the-fact review.

Observability & Service Operations

• Build and maintain observability across infrastructure and applications (metrics, logging, tracing, alerting) so issues are detected and diagnosed before they impact users.
• Design dashboards and alerting that give the SOT actionable, real-time signal - not noise - supporting the team's end-to-end ticket ownership model.
• Use observability data to drive proactive capacity planning, performance tuning, and reliability improvements.

Process Improvement & Ways of Working

• Continuously evaluate and modernize Information Services and agency workflows, tooling, and delivery practices, bringing in current industry practices (GitOps, platform engineering, self-service infrastructure) where they add real value.
• Lead blameless post-incident reviews focused on systemic, automatable fixes rather than one-off patches.
• Mentor and cross-train staff on automation, IaC, and observability practices, spreading modern engineering practices across the team rather than concentrating them in one role.

Physical Demands and Work Environment

• This position works in a comfortable office setting with a computer for a large percentage of the workday.
• The noise level in the work environment is usually mild.
• Occasional travel may be required.

Minimum Qualifications

Requirements include 5 years of experience in DevOps, DevSecOps, SRE, or platform engineering roles, including:

• Hands-on experience with infrastructure as code (Terraform, Ansible, Pulumi, or equivalent) and CI/CD tooling (e.g., GitHub Actions, GitLab CI, Jenkins, Azure DevOps).
• Experience embedding security practices (SAST/DAST, secrets management, policy-as-code) directly into delivery pipelines.
• Experience building observability with tools such as Prometheus, Grafana, Datadog, Splunk, or equivalent.
• Strong scripting/automation ability (Python, Bash, PowerShell, or similar).
• A demonstrated bias toward action: comfortable operating with incomplete requirements, proposing a path forward, and iterating in the open.