DevSecOps Engineer III

This is a fully remote position, open to applicants in Washington.

📋 Description

• Spearhead the enhancement and modernization of our GitHub ecosystem by consolidating organizations, implementing guardrails and RBAC best practices, and establishing policy-as-code governance at scale.

• Evaluate and advance the current CI/CD posture — modernizing pipelines, assessing tooling, and progressing towards fully automated secure delivery workflows.

• Apply Secure Software Development Framework (SSDF) practices to instill "secure-by-design" principles throughout the SDLC, ensuring supply chain integrity from commit to production.

• Serve as an SRE for new application infrastructure, focusing on developing observability, proactive reliability patterns, performance scaling strategies, and operational readiness.

• Design, oversee, and automate cloud infrastructure (including container and container orchestration where applicable) through infrastructure-as-code, aligned with NIST CSF 2.0, least-privilege, and zero-trust security models.

• Create and integrate ITSM operational workflows, introducing automation and process maturity as needed to align engineering velocity with auditable controls and resilience.

• Foster a culture of security throughout the organization.

• Be versatile in fulfilling essential responsibilities as needed, especially while the team is being developed.

• Occasional travel to other offices, customers, and vendor locations.

⛳️ Requirements

• 5–8+ years of experience in DevSecOps, SRE, or Cloud Security Engineering roles within production-critical environments.

• Extensive hands-on expertise with major cloud providers (IAM, networking, security services, automation, zero-trust / least privilege, cost awareness).

• Practical experience in operating and securing Kubernetes, including IaC-driven provisioning, policy enforcement, and observability.

• Strong proficiency in SCM administration, including RBAC, repository automation, organization policy enforcement, and secure SDLC controls.

• Skilled in Infrastructure as Code (Terraform, CDK, or similar) and configuration automation (e.g., Helm, ArgoCD, Crossplane, etc. is a plus).

• Familiarity with ITSM-aligned engineering operations, enabling traceability, incident management, and operational readiness at scale.

• Exceptional communicator and proactive collaborator, capable of influencing cross-functional teams and advocating for secure-by-design principles.

🏝️ Benefits

• Medical, Dental, and Vision insurance.

• 401(k).

• Disability insurance.