DevSecOps Engineer

This is a fully remote position, open to applicants in Texas.

📋 Description

• Oversee Google Workspace and endpoint management and protection tools across a remote fleet of Windows, macOS, and Chromebooks.

• Handle device provisioning, enrollment, policy enforcement, data wiping, and decommissioning, including repeatable volume scripting.

• Implement hiring, personnel changes, and termination access adjustments while ensuring a clean evidence trail.

• Enhance asset-record precision through process improvements and automation.

• Conduct regular vulnerability management cycles across cloud infrastructure and employee endpoints.

• Evaluate security alerts, verify their validity, resolve issues, or escalate as necessary.

• Analyze cloud configuration findings against compliance standards and ensure remediation is completed.

• Carry out periodic access reviews and gather evidence.

• Make hands-on modifications in AWS related to identity, permissions, network controls, encryption, logging, storage, and databases.

• Assist in migrating infrastructure to Terraform, minimizing console-only production configurations.

• Address legacy cloud sprawl by coordinating with system owners, testing decommissions, documenting cost savings, and eliminating orphaned components.

• Develop runbooks and document automation, procedures, standards, and technical processes.

• Gather and organize control evidence for HITRUST and SOC 2 programs.

• Independently manage recurring reporting cycles and enhance runbooks.

• Design production changes and recognize future remediation priorities.

⛳️ Requirements

• Approximately 3 to 5 years of hands-on experience in at least two areas: security operations, cloud infrastructure, and IT systems administration.

• Practical experience making changes in AWS accounts and/or Google Workspace, with an understanding of blast radius and issue investigation.

• Proficiency in Python or Bash scripting for task automation, data parsing, and system reconciliation.

• Experience in systems administration with an identity provider or endpoint management platform.

• Ability to produce clear, straightforward, and specific technical documentation that can be easily followed by others.

• Demonstrated ownership of cross-functional remediation tasks until completion.

• Comfort in handling health information for elderly or vulnerable populations.

• Familiarity with Infrastructure as Code, particularly Terraform, is a plus.

• Experience with HIPAA, HITRUST, SOC 2, or in an audited control environment is beneficial.

• Knowledge of containers, CI/CD, vulnerability scanning, or code analysis tools is advantageous.

• Experience with Salesforce platform administration is a plus.

• Certifications are welcomed but not mandatory.

🏝️ Benefits

• Performance-based incentive bonuses.

• Opportunities for professional growth within the company.

• Comprehensive health benefits, including medical, dental, and vision coverage.

• 401(k) Plan.

• Paid Time Off.

• Employee Assistance Program.

• Health Care Flexible Spending Account (FSA).

• Dependent Care FSA.

• Health Savings Account (HSA).

• Optional Disability Benefits.

• Basic Life and Accidental Death & Dismemberment (AD&D) Insurance.

• Adoption Assistance Program.

• Training and Development opportunities.

• Starting salary range: $100,000-$110,000.

• An equal-opportunity workplace dedicated to diversity and inclusion.