Lead DevOps

Overview

We are seeking a Senior DevSecOps Engineer to own and continuously improve the security, reliability, observability, and cost efficiency of our cloud and edge infrastructure. This role will lead the configuration and management of Cloudflare (WAF, CDN, rules, logging) and drive

AWS security, governance, and cost optimization, while advancing our monitoring, alerting, and incident response practices across multiple observability platforms.

This is a hands‑on, senior individual contributor role with strong influence over architecture, standards, and operational excellence.

Key Responsibilities

Cloudflare & Edge Security

Configure, manage, and optimize Cloudflare services including:

• Web Application Firewall (WAF)
• CDN and caching strategies
• Firewall rules, rate limiting, bot management, and custom rules

Analyze Cloudflare logs to identify:

• Security threats and attack patterns
• Performance bottlenecks
• False positives and rule tuning opportunities

Partner with engineering teams to safely expose APIs and customer‑facing endpoints.

AWS Security, Governance & Cost Optimization

Own AWS security posture, including:

• IAM best practices and least‑privilege access
• Network security (VPCs, security groups, NACLs)
• Encryption, key management, and compliance controls

Drive AWS cost optimization initiatives:

• Analyze usage patterns and spend
• Recommend and implement savings strategies (e.g., right‑sizing, reservations, architectural improvements)

Establish and maintain security and operational standards across AWS accounts and environments.

Observability, Logging & Monitoring

Design, optimize, and maintain centralized logging and observability across:

• Amazon CloudWatch
• New Relic
• Sumo Logic
• Cloudflare

Improve signal‑to‑noise ratio by:

• Reducing redundant or low‑value logs
• Standardizing log formats and metadata

Build and refine dashboards, alerts, and SLO/SLI‑based monitoring to improve system visibility and reliability.

Incident Response & Operational Excellence

Create, document, and continuously improve incident response processes:

• Detection, escalation, and communication
• Root cause analysis and post‑incident reviews
• Act as a senior responder for security and availability incidents
• Drive preventative improvements based on incident learnings

Partner with engineering and product teams to embed security and reliability earlier in the development lifecycle.

Required Qualifications

• 7+ years of experience in DevOps, SRE, or DevSecOps roles.
• Deep, hands‑on experience with AWS in production environments.
• Strong experience managing Cloudflare, including WAF and rule‑based security.
• Proven experience with observability platforms such as:
• CloudWatch
• New Relic
• Sumo Logic
• Strong understanding of:
• Web security principles (OWASP Top 10, DDoS mitigation, API security)
• Networking fundamentals (HTTP, TLS, DNS)
• Experience creating and improving operational processes and runbooks.
• Ability to analyze logs and metrics to drive actionable improvements.
• Strong written communication skills for documentation, incident reports, and recommendations.

Preferred / Nice‑to‑Have Qualifications

• Experience with infrastructure as code (Terraform, CloudFormation, etc.).
• Familiarity with eCommerce or high‑traffic, customer‑facing systems.
• Experience working with CI/CD pipelines and secure deployment practices.
• Knowledge of compliance or regulatory frameworks (PCI, SOC 2, etc.).
• Experience mentoring engineers or acting as a technical leader.

What Success Looks Like

Cloudflare rules are well‑tuned, effective, and low‑noise.

AWS environments are secure, cost‑efficient, and consistently governed.

Logs, dashboards, and alerts provide clear, actionable insights.

Incidents are detected earlier, resolved faster, and recur less often.

Security and reliability are embedded into everyday engineering workflows.