DevSecOps Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, implement, and sustain secure, scalable infrastructure within AWS.

• Manage, secure, and enhance Kubernetes environments, including those in production.

• Construct and uphold infrastructure as code utilizing Terraform.

• Strengthen production systems across cloud, compute, container, identity, and network layers.

• Develop and uphold secure baseline configurations for infrastructure and platform services.

• Assist with vulnerability management, patching, remediation, and ensuring configuration compliance across environments.

• Configure, administer, and patch both Linux and Windows virtual machines.

• Support identity and access management protocols, encompassing least privilege, role design, and privileged access controls.

• Contribute to the administration and integration of Active Directory domains as required.

• Collaborate with engineering teams to enhance security within CI/CD pipelines, deployment workflows, and operational processes.

• Aid compliance initiatives, audits, evidence collection, and technical control validation.

• Develop and maintain documentation, operational runbooks, technical standards, and playbooks.

• Monitor, troubleshoot, and resolve intricate infrastructure and security challenges.

• Engage in incident response and post-incident analyses.

• Stay updated on cloud, infrastructure, and security best practices that enhance platform resilience and delivery.

⛳️ Requirements

• At least 5 years of experience in DevOps, DevSecOps, Infrastructure Engineering, Platform Engineering, or Security Engineering.

• Extensive hands-on experience with AWS in production settings.

• Demonstrated experience with Kubernetes, preferably in production scenarios.

• Strong background in Terraform and infrastructure-as-code methodologies.

• Experience in hardening production environments and applying secure configuration standards.

• Familiarity with compliance frameworks, audit preparation, evidence collection, and control validation.

• Experience in vulnerability remediation, system patching, and operational security practices.

• Proficient in configuring and maintaining both Linux and Windows virtual machines.

• In-depth understanding of IAM, secrets management, network security, logging, monitoring, and operational controls.

• Proven track record of enhancing or securing CI/CD pipelines and deployment workflows.

• Exceptional troubleshooting and problem-solving abilities in complex production environments.

• Strong communication skills with the capability to convey technical concepts to both technical and non-technical audiences.

• Must reside and work in the U.S.

🏝️ Benefits

• Bonuses may be available.

• Equity options may be available.

• A comprehensive benefits package may be available.