Staff Engineer - DevSecOps - Enterprise Engineering

TJX Companies

At TJX Companies, every day brings new opportunities for growth, exploration, and achievement. You'll be part of our vibrant team that embraces diversity, fosters collaboration, and prioritizes your development. Whether you're working in our four global Home Offices, Distribution Centers or Retail Stores-TJ Maxx, Marshalls, Homegoods, Homesense, Sierra, Winners, and TK Maxx, you'll find abundant opportunities to learn, thrive, and make an impact. Come join our TJX family-a Fortune 100 company and the world's leading off-price retailer.

Job Description:

Who We Are

The Enterprise Engineering function supports product teams and shared service partners by delivering foundational services such as Enterprise Tools, DevSecOps, and Performance & Quality Engineering. Our mission is to drive operational excellence and innovation across global IT products through integrated deployment, testing, performance engineering, labs, and automation.

• Partner with product teams to integrate DevSecOps practices into workflows and promote DevOps adoption across the organization.

• Design, implement, and manage secure CI/CD pipelines, automating security processes and integrating them into delivery pipelines.

• Conduct security assessments and audits of systems and applications.

• Develop and maintain security documentation and best practices.

• Create reusable solutions, patterns, and shared libraries for CI/CD pipelines to enable faster builds and deployments.

• Collaborate with cross-functional teams to ensure secure and efficient software delivery and consult on DevSecOps requirements for diverse applications.

• Troubleshoot and resolve issues in the DevSecOps domain while driving continuous improvement.

• Mentor and guide engineers on DevSecOps principles, automation, and secure coding practices.

• 6+ years of IT experience, including 3+ years with DevSecOps tools like Ansible, Jenkins, Artifactory, Jira, Confluence, SonarQube, Terraform, GitHub Actions, Git.

• 3+ years of scripting/coding experience preferably - Groovy, Python.

• Strong knowledge of Azure Cloud, containerization (Docker), and orchestration (Kubernetes).

• Familiarity with security tools and practices (SAST, DAST, vulnerability management).

• Experience with compliance and audit processes.

• Excellent problem-solving, communication, and collaboration skills.

• Ability to clearly convey technical information across organizational levels.

• Extensive knowledge of DevSecOps principles and standards.

• Proven history of technical leadership and community building.

• Strong understanding of best practices and ability to collaborate on governance process development.

• Excellent knowledge of SOX compliance, audit processes, and experience working with external auditors (e.g., PwC).