DevSecOps Engineer
McCormick & Company ·
- Category
- Security
McCormick & Company ·
At McCormick, we bring our passion for flavor to work each day. We encourage growth, respect everyone's contributions and do what's right for our business, our people, our communities and our planet. Join us on our quest to make every meal and moment better.
Founded in Baltimore, MD in 1889 in a room and a cellar by 25-year-old Willoughby McCormick with three employees, McCormick is a global leader in flavour. With over 14,000 employees around the world and more than $6 Billion in annual sales, the Company manufactures, markets, and distributes spices, seasoning mixes, condiments and other flavourful products to the entire food industry, retail outlets, food manufactures, food service businesses and consumers.
While our global headquarters are in the Baltimore, Maryland, USA area, McCormick operates and serves customers from nearly 60 locations in 25 countries and 170 markets in Asia-Pacific, China, Europe, Middle East and Africa, and the Americas, including North, South and Central America
Position Overview
The Engineer II, DevSecOps is a fully competent engineering professional who independently designs, implements, supports, and improves secure platform and software delivery and automation solutions within Azure environments. This role is accountable for CI/CD platforms, automation frameworks, and security integration across the software development lifecycle.
The role partners closely with Software Engineers, Cloud Platform Engineers, Security Engineers, and Architects to enable secure, automated, and resilient solution delivery aligned with DevSecOps best practices.
Shift Timings: 01:00PM - 09:30PM IST
Key Responsibilities
• Design and implement DevSecOps solutions and secure CI/CD processes.
• Own day to day engineering activities for DevSecOps platforms, automation tooling, and delivery pipelines.
• Manage CI/CD platforms and code repositories, developing automated pipelines for application deployment and infrastructure provisioning.
• Troubleshoot and resolve moderately complex pipeline, automation, or integration issues.
• Automate testing, security scanning, and compliance validation within software delivery pipelines.
• Integrate security controls including static analysis, dependency scanning, container scanning, and policy validation into CI/CD workflows.
• Develop, maintain, and version reusable Infrastructure-as-Code (IaC) modules and templates (e.g., Terraform, Ansible, ARM) to enable secure, standardized, and scalable Azure infrastructure provisioning.
• Implement GitOps and declarative infrastructure deployment models within Azure environments.
• Promote DevSecOps best practices and secure coding standards across engineering teams.
• Support architecture, capacity, performance, resiliency, and lifecycle planning of DevSecOps toolchains.
• Develop and maintain documentation, standards, and secure pipeline patterns.
• Implement monitoring, logging, and observability within CI/CD and deployment processes.
• Contribute to high-availability and disaster recovery strategies for CI/CD and automation platforms.
• Contribute to automation, monitoring, and service improvement efforts.
• Provide guidance to less experienced engineers as needed.
• Partner with stakeholders to support project and operational objectives.
Required Qualifications
• Solid engineering knowledge in DevSecOps practices and CI/CD automation within Azure environments.
• Experience designing and maintaining CI/CD pipelines using Azure DevOps or GitHub Actions.
• Experience integrating security controls into automated pipelines (SAST, DAST, container scanning, secrets management).
• Proficiency with Infrastructure-as-Code tools and scripting languages.
• Strong understanding of source control management and Git-based workflows.
• Understanding of availability, performance, security, compliance, and supportability considerations.
• Ability to independently deliver moderate complexity technical work.
• Strong problem solving and root cause analysis skills.
• Ability to participate in technical reviews and recommend improvements.
• Effective collaboration across technical and business teams.
Preferred Qualifications
• Bachelor’s degree in Computer Science, Engineering, or related field (or equivalent experience).
• Microsoft Certified: Azure DevOps Engineer Expert.
• Microsoft Certified: Azure Administrator Associate.
• Certified Kubernetes Administrator (CKA) or equivalent.
• 12+ years of experience in DevOps, DevSecOps, or Platform Engineering roles.
• Experience implementing enterprise DevSecOps governance and secure software delivery frameworks.
• Experience supporting containerized workloads and Azure Kubernetes Service (AKS).
• Strong communication, influence, and stakeholder alignment skills.
At McCormick, we have over a 100-year legacy based on our “Power of People” principle. This principle fosters an unusually dedicated workforce requiring a culture of respect, recognition, inclusion and collaboration based on the highest ethical value