Staff Engineer - DevSecOps - Enterprise Engineering
- Compensation
- $116.2K–$151K / yr
- Location
- Marlborough, MA 01752
- Work setup
- Hybrid
- Seniority
- Staff
- Employment
- Not specified
- Experience
- 3+ years
- Category
- Security
- Posted
Skills
Must have
- 6+ years of IT experience, including 3+ years with DevSecOps tools like Ansible, Jenkins, Artifactory, Jira, Confluence, SonarQube, Terraform, GitHub Actions, Git.
Nice to have
- Extensive knowledge of DevSecOps principles and standards.
Full description
TJX Companies
At TJX Companies, every day brings new opportunities for growth, exploration, and achievement. You’ll be part of our vibrant team that embraces diversity, fosters collaboration, and prioritizes your development. Whether you’re working in our four global Home Offices, Distribution Centers or Retail Stores—TJ Maxx, Marshalls, Homegoods, Homesense, Sierra, Winners, and TK Maxx, you’ll find abundant opportunities to learn, thrive, and make an impact. Come join our TJX family—a Fortune 100 company and the world’s leading off-price retailer.
Job Description:Who We Are
The Enterprise Engineering function supports product teams and shared service partners by delivering foundational services such as Enterprise Tools, DevSecOps, and Performance & Quality Engineering. Our mission is to drive operational excellence and innovation across global IT products through integrated deployment, testing, performance engineering, labs, and automation.
What You Will Do
A Staff Engineer in Enterprise Engineering needs to be strong in DevSecOps, you will play a key role in leading the design and implementation of secure CI/CD pipelines, collaborating with engineering, operations, and security teams, and driving governance and compliance initiatives
Key Responsibilities:
- Partner with product teams to integrate DevSecOps practices into workflows and promote DevOps adoption across the organization.
- Design, implement, and manage secure CI/CD pipelines, automating security processes and integrating them into delivery pipelines.
- Conduct security assessments and audits of systems and applications.
- Develop and maintain security documentation and best practices.
- Create reusable solutions, patterns, and shared libraries for CI/CD pipelines to enable faster builds and deployments.
- Collaborate with cross-functional teams to ensure secure and efficient software delivery and consult on DevSecOps requirements for diverse applications.
- Troubleshoot and resolve issues in the DevSecOps domain while driving continuous improvement.
- Mentor and guide engineers on DevSecOps principles, automation, and secure coding practices.
What You Will Need
- 6+ years of IT experience, including 3+ years with DevSecOps tools like Ansible, Jenkins, Artifactory, Jira, Confluence, SonarQube, Terraform, GitHub Actions, Git.
- 3+ years of scripting/coding experience preferably - Groovy, Python.
- Strong knowledge of Azure Cloud, containerization (Docker), and orchestration (Kubernetes).
- Familiarity with security tools and practices (SAST, DAST, vulnerability management).