Apply on Employer Site

Zscaler · 2 weeks ago

Staff DevSecOps Engineer

San Jose, CA

Full-time

Hybrid

Senior Level, Lead/Staff

$130K/yr - $185K/yr

5+ years exp

Zscaler accelerates digital transformation through its cloud native Zero Trust Exchange platform, protecting customers from cyberattacks and data loss. The Staff DevSecOps Engineer will manage CI/CD pipelines, strengthen security practices, and support internal product teams while working in a hybrid environment.

Cloud SecurityCyber SecurityEnterprise SoftwareSecurity

No H1B

U.S. Citizen Only

Responsibilities

Building and managing CI/CD systems to deploy critical applications across hybrid cloud environments (AWS, GCP, and proprietary clouds)

Supporting internal product teams with CI/CD pipelines, automations, and tools like GitLab, GitHub, Jenkins, ArgoCD, and security scanning solutions

Securing code, applications, and infrastructure using security scanning tools such as SonarQube, Snyk, Coverity, and CheckMarx

Administering and optimizing critical DevSecOps applications, while monitoring build metrics (e.g., coverage, times, agent usage) with tools like Grafana, Prometheus, and CloudWatch

Communicating progress to stakeholders through Jira, technical documentation, and status updates

Qualification

CI/CD managementCloud environmentsApplication security testingOOP languagesGitOps pipelinesContainer orchestrationAutomation toolsNetworkingLoad BalancersFirewallsWeb SecurityTechnical documentationCommunication skills

Required

U.S. citizenship is required due to the nature of assigned customers and a Bachelor's degree in Computer Science (or related field), or equivalent practical experience

5+ years of overall professional experience, including hands-on experience managing cloud environments such as AWS, GCP, or private clouds

Proficiency in application development or automation using OOP languages like C/C++, Java, Python, or Go, with exposure to container orchestration (e.g., Docker, Kubernetes, EKS, GKE) and automation tools (e.g., Terraform, Ansible, CloudFormation)

Familiarity with application security testing methodologies (e.g., SAST, SCA, DAST, secret scans) and experience using tools like SonarQube, Snyk, Coverity, or CheckMarx

Experience designing and managing GitOps-based pipelines using GitLab, GitHub, and CI/CD automation tools like Jenkins or GitHub Actions