DevSecOps Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, implement, and sustain a secure, scalable infrastructure within **AWS**.

• Oversee, secure, and enhance **Kubernetes** environments, including production workloads.

• Construct and manage infrastructure as code utilizing **Terraform**.

• Strengthen production systems across cloud, compute, container, identity, and network layers.

• Create and uphold secure baseline configurations for infrastructure and platform services.

• Assist in vulnerability management, patching, remediation, and ensuring configuration compliance across environments.

• Set up, administer, and patch both **Linux and Windows VMs**.

• Support identity and access management protocols, including least privilege, role design, and privileged access controls.

• Collaborate on the administration and integration of **Active Directory domains** as needed.

• Work with engineering teams to enhance security in CI/CD pipelines, deployment workflows, and operational processes.

• Aid in **compliance initiatives, audits, evidence collection, and technical control validation**.

• Develop and sustain documentation, operational runbooks, technical standards, and playbooks.

• Monitor, diagnose, and resolve intricate infrastructure and security issues with clear and timely communication.

• Engage in incident response and post-incident analysis when infrastructure or platform challenges occur.

• Stay updated on cloud, infrastructure, and security best practices to enhance platform resilience and delivery.

⛳️ Requirements

• A minimum of **5 years of experience** in DevOps, DevSecOps, Infrastructure Engineering, Platform Engineering, or Security Engineering.

• Strong practical experience with **AWS** in production settings.

• Proven background with **Kubernetes**, ideally in production.

• Extensive experience with **Terraform** and infrastructure-as-code methodologies.

• Experience in hardening production environments and applying secure configuration standards.

• Familiarity with supporting **compliance frameworks, audit preparation, evidence gathering, and control validation**.

• Experience in vulnerability remediation, system patching, and operational security practices.

• Proficiency in configuring and maintaining both **Linux and Windows virtual machines**.

• Strong knowledge of IAM, secrets management, network security, logging, monitoring, and operational controls.

• Proven track record of enhancing or securing CI/CD pipelines and deployment workflows.

• Excellent troubleshooting and problem-solving abilities in complex production environments.

• Strong communication skills with the capability to convey technical concepts to both technical and non-technical stakeholders.

• **Must reside/work in the U.S.**

🏝️ Benefits

• The expected compensation range for this position may vary based on experience, skills, qualifications, location, and business requirements.

• In addition to the base salary, this role may qualify for bonuses, equity, and a comprehensive benefits package.