Senior DevOps Engineer, Security & Compliance

This is a fully remote position, open to applicants in New York.

📋 Description

• Oversee the technical efforts necessary to obtain and uphold compliance certifications such as SOC 2, ISO 27001, and the forthcoming FedRAMP process.

• Create and enforce security measures across AWS infrastructure, CI/CD pipelines, Kubernetes, and application deployments.

• Develop the automation, logging, and evidence collection systems required for ongoing compliance.

• Establish and sustain secrets management, IAM hardening, network segmentation, and encryption protocols.

• Design infrastructure solutions for clients in highly regulated sectors, including isolated or dedicated environments.

• Collaborate with security, legal, and engineering teams on threat modeling, vulnerability management, and incident response efforts.

• Remain informed about FedRAMP, FISMA, and other related federal regulations, translating them into actionable engineering tasks.

⛳️ Requirements

• Candidates must reside in the U.S., with a strong preference for those in the New York area; remote work within the U.S. may be considered.

• U.S. citizenship or lawful permanent resident status (Green Card) is required due to FedRAMP-related eligibility criteria and access to a U.S.-only environment.

• Minimum of 5 years of experience in DevOps or platform engineering with a significant emphasis on security.

• Proven experience in implementing controls for SOC 2, ISO 27001, HIPAA, PCI, or FedRAMP.

• Extensive knowledge of AWS security, including IAM, KMS, GuardDuty, Security Hub, VPC design, and Config.

• Strong expertise in Kubernetes security, covering network policies, admission control, and runtime security.

• Proficient in Infrastructure as Code using Terraform, with an emphasis on policy-as-code.

• Experience with CI/CD security practices, including SAST, DAST, SCA, image scanning, and supply chain hardening.

• Solid scripting skills in Python or Bash.

🏝️ Benefits

• Flexible PTO.

• Health insurance plans (medical, dental, vision).

• Monthly stipend for phone and internet expenses.

• 401k plan.

• Flexible spending account.

• Home office stipend.