Sr DevOps Engineer

Job Description

Job Description :
Position Summary The Senior Dev Ops Engineer supports Credit Union of Texas's vision to be the trusted financial partner for our members and our community by building and owning the end-to-end software development lifecycle (SDLC) on Azure Dev Ops. The role modernizes and standardizes the SDLC for existing applications, implements CI/CD and multi-environment (Dev, UAT, Prod) strategies, and makes the Node.js

application code changes needed to support them. The role establishes secure secrets management, artifact management, static and dynamic application security testing (SAST with JFrog and DAST with Invicti), code quality and test coverage gates (Sonar Qube), Infrastructure as Code, automated testing, and observability practices (Datadog APM and Logs) that make releases repeatable, traceable, and audit-ready. Once the foundation is in place, the Senior Dev Ops Engineer contributes to Node.js

development and onboards new applications onto the standardized SDLC. The role uses CUTX-approved AI tools under defined governance, with mandatory human review of any AI-assisted code or configuration after it reaches production.

Key Responsibilities CI/CD, Source Control & Release Management Design and implement CI/CD pipelines (YAML) in Azure Dev Ops for existing and new applications. Manage Azure Repos, including branching strategy, branch policies, pull request workflows, and code review gates. Design and implement multi-environment strategies (Dev, UAT, Prod) with automated promotion, including the infrastructure and application changes required to support them. Set up release strategies such as approvals, environment promotion, and rollback.

Implement feature flags using Azure App Configuration to reduce release risk. Security, Secrets & Code Quality Implement and standardize secrets management using Azure Key Vault and Managed Identity across applications, including the Node.js code changes needed to load secrets and configuration securely ablish secure secret lifecycle practices, including rotation and access controls. Implement static application security testing (SAST) using JFrog Advanced Security, with critical and high findings blocking merges and releases.

Integrate Sonar Qube for code quality and unit test coverage analysis (coverage thresholds, bugs, code smells, duplication, and maintainability), with quality gates enforced on every pull request and pipeline run. Integrate Invicti for dynamic application security testing (DAST) against deployed applications in Dev and UAT, with critical and high findings blocking promotion to Production. Coordinate triage and remediation of SAST, DAST, dependency, and secret scanning findings with development teams and Information Security, and track them to closure in Azure Boards.

Implement dependency, vulnerability, and secret scanning (such as JFrog Xray, Snyk, Git Hub Advanced Security for Azure Dev Ops, or Gitleaks) with results enforced in pipelines. Enforce code consistency standards with ESLint and Prettier in pull request checks. Infrastructure, Artifacts & Containers Implement Infrastructure as Code (Terraform, Bicep, or ARM) for repeatable environment provisioning. Set up and manage JFrog Artifactory for package and artifact management, including npm and Docker registries.

Containerize applications with Docker where appropriate, and support a future move to Azure Kubernetes Service (AKS). Testing, Monitoring & Observability Build automated testing into pipelines, including unit tests (Jest) and end-to-end tests (Playwright or Cypress). Set up monitoring and observability with Datadog APM and Datadog Log Management across all environments, alongside Azure Monitor and Application Insights for Azure…