Senior DevSecOps Engineer

This is a fully remote position, open to applicants in India.

📋 Description

• Create and manage Infrastructure as Code (IaC) with secure defaults.

• Identify vulnerabilities, conduct threat modeling, and prioritize remediation efforts.

• Oversee live systems, investigate security anomalies, and respond to security breaches.

• Design, deploy, and sustain Infrastructure-as-Code (IaC) within a GCP cloud environment.

• Spearhead the development and implementation of security architecture and operational best practices.

• Set up monitoring, alerting, and incident response protocols across various environments.

• Define and execute security roadmaps, including threat modeling, vulnerability scanning, and IAM policies.

• Collaborate with developers to integrate security and reliability early in the SDLC.

• Assist with compliance and audit activities (SOC2, ISO27001).

• Design and maintain automated CI/CD pipelines utilizing DevSecOps tools.

• Implement and manage complex modern cloud architectures.

• Develop automated testing plans for both infrastructure and applications.

• Create and revise technical documentation, such as user manuals and infrastructure diagrams.

• Work across infrastructure environments that include both Linux and Windows systems.

• Employ strong troubleshooting abilities.

⛳️ Requirements

• Over 5 years of experience in DevOps, SRE, or DevSecOps positions.

• Extensive knowledge of cloud infrastructure, emphasizing security, scalability, and cost-effectiveness.

• Proficient in infrastructure-as-code tools (Terraform, Ansible).

• Experienced with CI/CD automation tools (GitHub Actions, ArgoCD, etc.).

• Strong grasp of security fundamentals, including identity and access management, secrets management, encryption, and container security.

• Familiar with compliance frameworks such as SOC2 and ISO27001.

• Comfortable writing code and automation scripts in languages like Python, Bash, or Go.

• Experience with Kubernetes, service mesh technologies (e.g., Istio), and zero-trust architecture.

• Proven track record of leading incident response efforts or driving large-scale reliability enhancements.

• Excellent communication skills to interact with both technical and non-technical stakeholders.

🏝️ Benefits

• Remote-first workplace culture.

• Strong emphasis on asynchronous communication.

• Thoughtful and effective communication practices.

• High degree of autonomy.

• Collaborative work environment.