Senior DevSecOps Engineer

Responsibilities:

• Security posture of our AWS environment (ECS, Lambda, EC2 IAM, and VPC) hardening, least-privilege IAM, and network segmentation.
• AWS infrastructure automation using Terraform, Pulumi, or similar, with policy-as-code and drift detection.
• End-to-end vulnerability management: AWS Inspector triage, CVE remediation across Linux fleets, patching cadence.
• Continuous SOC 2 audit readiness evidence automation, control monitoring, and auditor engagement.
• CI/CD security: GitHub Actions hardening, secrets/OIDC, SCA, SAST/DAST, supply-chain controls.
• Leading large customer deployments, especially on-prem, hybrid and air-gapped environments.
• Especially working with infosec and infrastructure teams and guiding them with Oloid product line deployments.
• Provide technical leadership to other DevOps and infrastructure teams.
• Incident response runbooks, container security, and secure design reviews with product. engineering

Requirements:

• 6+ years in DevOps/SRE/infrastructure engineering, 3+ with a security focus.
• Deep hands-on AWS expertise and strong IaC experience (Terraform/Pulumi + OPA, Checkov, or similar).
• Vulnerability management at scale (Inspector, Qualys, Tenable) and Linux patching experience.
• CI/CD security experience (GitHub Actions preferred) and scripting fluency (Python, Bash).
• SOC 2 Type II or ISO 27001 audit support experience.
• Container security: Docker, ECS/Kubernetes, image scanning, runtime controls.
• Preferred: prior cybersecurity experience (security engineering, SecOps, or pentesting), endpoint/Windows agent security, PKI knowledge, observability tooling (Grafana, Prometheus, OpenTelemetry).
• The ideal candidate combines strong technical depth with the ability to communicate effectively, being equally comfortable presenting to auditors, advising product teams, and executing hands-on remediation while maintaining a high security bar without slowing delivery.