DevSecOps Engineer

Summary

Paylocity is a provider of cloud-based HR and payroll software solutions for the modern workforce. The DevSecOps Engineer provides guidance on software security and architecture, develops and maintains application security tools, performs static and dynamic application analysis, and supports secure development practices across internal teams.

Responsibilities

• Develop and maintain internal application security tooling
• Integrate security into the build/deployment process
• Promote a proactive approach to addressing the changing threat landscape by recommending and implementing architectural improvements to security infrastructure
• Provide expert guidance and recommendations for strategic and tactical security architecture topics through risk advisory services
• Assist developers in remediating vulnerabilities by providing line-by-line guidance
• Provide training and education to developers on software security best practices in various cloud-based systems

Skills

• This is a fully remote position, allowing you to work from home or location of record within the U.S. with no in-office requirements
• You must be available five days per week during designated work hours
• • Bachelor's degree in InfoSec, Computer Science, Engineering, or a related field, or equivalent practical experience
• • Minimum 3 years' experience with full-stack web development
• • Experience developing and working with Web APIs
• • Experience with scaling secure-by-design security solutions for developers
• • Experience interpreting results from Static Code Scanning tools and third party dependency scanning tools
• • Strong knowledge of Security Token Services, Federated Identity Providers, SAML 2.0, claims-based security and other SSO technologies
• • Experience in remediating security vulnerabilities beyond OWASP Top 10
• • Experience in assessing security of native and hybrid mobile applications beyond the use of automated tools
• • Strong experience developing in Python
• • Ability to sit for extended periods: The role requires sitting at a desk or workstation for long periods, typically 7-8 hours a day
• • Use of computer and phone systems: The employee must be able to operate a computer, use phone systems, and type. This includes using multiple software programs and inquiries simultaneously
• • Experience developing in .NET is a plus
• • Functional knowledge of container-based application infrastructure with Docker is a plus
• • Experience working with Payroll, HR, Time & Labor Management, and Online Benefits Enrollment applications is a plus
• • Experience with Privileged Access Management and/or Secrets Management is a plus

Qualifications

Must Haves

• This is a fully remote position, allowing you to work from home or location of record within the U.S. with no in-office requirements
• You must be available five days per week during designated work hours
• • Bachelor's degree in InfoSec, Computer Science, Engineering, or a related field, or equivalent practical experience
• • Minimum 3 years' experience with full-stack web development
• • Experience developing and working with Web APIs
• • Experience with scaling secure-by-design security solutions for developers
• • Experience interpreting results from Static Code Scanning tools and third party dependency scanning tools
• • Strong knowledge of Security Token Services, Federated Identity Providers, SAML 2.0, claims-based security and other SSO technologies
• • Experience in remediating security vulnerabilities beyond OWASP Top 10
• • Experience in assessing security of native and hybrid mobile applications beyond the use of automated tools
• • Strong experience developing in Python
• • Ability to sit for extended periods: The role requires sitting at a desk or workstation for long periods, typically 7-8 hours a day
• • Use of computer and phone systems: The employee must be able to operate a computer, use phone systems, and type. This includes using multiple software programs and inquiries simultaneously

Nice to Haves

• • Experience developing in .NET is a plus
• • Functional knowledge of container-based application infrastructure with Docker is a plus
• • Experience working with Payroll, HR, Time & Labor Management, and Online Benefits Enrollment applications is a plus
• • Experience with Privileged Access Management and/or Secrets Management is a plus

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• Life insurance
• Disability insurance
• 401(k) match
• Perks that support you, your family, and your finances
• Career development
• Fully remote position, allowing you to work from home or location of record within the U.S. with no in-office requirements
• Annual bonus
• Restricted stock unit grant based on individual performance