Cloud Security, DevSecOps Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Ensure and enhance FedRAMP compliance within an AWS environment.

• Oversee and refine infrastructure utilizing Terraform and best practices for infrastructure-as-code.

• Detect and address vulnerabilities in Golang/container and other security concerns.

• Examine and rectify misconfigurations within cloud infrastructure.

• Assess systems and infrastructure in accordance with NIST security guidelines and controls.

• Create and sustain CI/CD automation leveraging GitHub Actions.

• Collaborate with engineering teams to embed security within the software development lifecycle.

• Monitor infrastructure and applications for security vulnerabilities and compliance deficiencies.

• Develop repeatable procedures for security, compliance, and infrastructure management.

• Play a role in architectural and engineering decisions as the organization expands.

⛳️ Requirements

• Extensive professional experience with Terraform and infrastructure as code.

• Practical experience with Go (Golang).

• Experience in constructing or maintaining CI/CD pipelines using GitHub Actions.

• Proficient with AWS cloud infrastructure.

• Solid understanding of cloud security and infrastructure security principles.

• Experience in identifying and mitigating vulnerabilities in containers and cloud environments.

• Knowledge of NIST security guidelines and frameworks.

• Experience in a security-conscious or regulated environment.

• Experience in maintaining FedRAMP-compliant environments (preferred).

• Familiarity with AWS security services and controls (preferred).

• Experience with Kubernetes and container security (preferred).

• Experience in vulnerability management and remediation (preferred).

• Knowledge of automated security testing and DevSecOps practices (preferred).

• Experience collaborating with government or highly regulated clients (preferred).

• Familiarity with additional infrastructure/security tools such as Rust (a plus).

🏝️ Benefits

• Opportunities for advancement into broader technical leadership and architectural roles.

• Potential pathway towards a Head of Engineering position.