DevSecOps Engineer at Becton Dickinson in Sparks, MD

Job description

As a result of the combination of the BD Biosciences and Diagnostic Solutions business with Waters Corporation (NYSE: WAT), by applying to this role, you will be applying for a position with Waters. Waters is a global leader in life sciences, dedicated to accelerating the benefits of pioneering science through analytical technologies, informatics, and service. With a focus on regulated, high-volume testing environments, Waters’ innovative portfolio harnesses deep scientific expertise across biology, chemistry, and physics. Waters collaborates with analytical laboratories around the world to advance the release of effective, high-quality medicines, assure the safety of food and water, and drive better patient outcomes by detecting diseases earlier, managing routine infections, and combatting growing antibiotic resistance. Through a shared culture of relentless innovation, Waters’ passionate team of approximately 16,000 colleagues partner with customers to turn scientific challenges into breakthroughs that improve lives worldwide.

 We are the people who give possibilities purpose BD is one of the largest global medical technology companies in the world. Advancing the world of health™ is our Purpose, and it’s no small feat. It takes the imagination and passion of all of us—from design and engineering to the manufacturing and marketing of our billions of MedTech products per year—to look at the impossible and find transformative solutions that turn dreams into possibilities. 

 Job Description Summary: We are seeking a DevSecOps Engineer to play a critical role in designing, automating, securing, and maintaining cloud-based infrastructure and software delivery pipelines. This individual will partner closely with software engineers, architects, and cybersecurity stakeholders to implement modern DevSecOps practices that enable secure, reliable, and scalable application delivery. The DevSecOps Engineer will be responsible for building and managing cloud infrastructure using Infrastructure as Code (IaC), developing and supporting CI/CD pipelines, and embedding security controls throughout the software development lifecycle. The role will also focus on vulnerability management, automated security testing, compliance monitoring, and continuous improvement of the organization's security posture. Success in this position requires a strong blend of software engineering, cloud infrastructure, automation, and cybersecurity expertise, along with the ability to solve complex technical challenges in a highly regulated environment. Ideal Candidate: The ideal candidate is a hands-on DevSecOps engineer with experience building secure cloud infrastructure, automating deployments, and integrating security into CI/CD pipelines. They bring a strong software development background in Python or C#, expertise with cloud platforms and Infrastructure as Code tools such as Terraform, and experience with CI/CD technologies including Jenkins, GitLab CI, or CircleCI. They are passionate about secure software delivery, leverage automated security testing and compliance controls, and collaborate effectively with development teams to improve reliability, scalability, and security. Experience with containerization technologies, cloud-native environments, and regulated industries is highly desirable. Responsibilities : Design, provision, and manage cloud infrastructure using Infrastructure as Code (IaC) tools such as Terraform (or equivalent). Create documentation on CI/CD pipelines and practices for software teams. Build, maintain, and troubleshoot CI/CD pipelines that deploy both application code and cloud infrastructure. Integrate security practices such as automated scanning, static analysis, and security compliance checks into CI/CD pipelines. Monitor and improve system security posture, including vulnerability management and incident response. Collaborate with development teams to ensure secure and reliable build, deployment, and operational