Senior DevSecOps Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Take ownership of CI/CD processes and infrastructure design across various application teams.

• Establish architecture and deployment methodologies, including blue/green deployments, canary releases, and feature flags.

• Draft specifications for AI-generated pipelines, infrastructure code, and automation, including hands-on coding when necessary.

• Design and verify pipeline tests, policy-as-code, and security checkpoints.

• Develop shared standards and tools for CI/CD, infrastructure, security, and DevSecOps.

• Implement observability for supported services and take responsibility for application monitoring.

• Link alerting systems to product Service Level Objectives (SLOs).

• Assist engineers in diagnosing and resolving production issues.

• Engage in reviews, deployment choices, on-call duties, and lessons learned from incidents.

• Mentor engineers on defining, assigning, and validating tasks with AI support.

• Collaborate with DevSecOps colleagues and various application teams.

⛳️ Requirements

• Proven experience utilizing agentic AI as the main interface for planning and constructing CI/CD and infrastructure.

• Demonstrated ability to write executable specifications for AI-generated pipelines and infrastructure while validating AI outputs.

• Experience in building and managing production CI/CD and cloud infrastructure at scale within AWS or Azure.

• Previous experience handling on-call responsibilities.

• Skilled in designing testing, security, and observability features within systems.

• Experience collaborating across multiple application teams and with DevSecOps peers.

• Practical experience with containers and Kubernetes for application workloads.

• Familiarity with Helm or comparable tools.

• Hands-on experience with serverless functions in production environments.

• Experience with one or more Infrastructure as Code (IaC) tools such as Terraform, CloudFormation, or ARM.

• Proficiency in at least one modern programming language, like Python or Java.

• Knowledge of implementing SAST, DAST, SCA, and secrets scanning within pipelines.

• Experience with least-privilege Identity and Access Management (IAM).

• Understanding of encryption practices for data in transit and at rest.

• Familiarity with HIPAA/HITRUST and SOC 2 compliance frameworks.

🏝️ Benefits

• Paid Time Off (PTO)

• Medical insurance

• Dental insurance

• Vision insurance

• 401(k) with matching contributions

• Comprehensive Employee Assistance Program (EAP)

• Wellness program