Overview

Senior DevSecOps Engineer

Responsibilities

• Design, build, and improve reliable, scalable, and automated AWS, Kubernetes/EKS, Infrastructure as Code, and CI/CD capabilities while applying security as an integrated engineering requirement.
• Drive practical adoption of secure software delivery practices across product teams, translating enterprise security, architecture, and compliance requirements into reusable engineering controls and implementation patterns.
• Implement and improve static analysis, software composition and open-source dependency scanning, vulnerability detection, secrets detection, artifact controls, and actionable remediation workflows using approved tools.
• Implement secure AWS, Kubernetes/EKS, network, workload, container, and Infrastructure as Code patterns, including scanning, hardening, admission controls, policy as code, and remediation automation.
• Automate control evidence where practical, improve traceability, support ISO 27001 and related assurance needs, and maintain clear documentation for security controls, exceptions, decisions, and remediation status.
• Support investigation and long-term corrective actions for security-related production issues in partnership with SRE, Architecture, Security, and responsible product teams.

Qualifications

• Bachelor's degree in Computer Science, Software Engineering, Information Technology, or a related technical field, or equivalent practical experience.
• Five or more years of hands-on experience in DevOps, Cloud Engineering, Platform Engineering, Infrastructure Engineering, Software Engineering, or a closely related technical role.
• Strong hands-on experience with AWS services such as EC2, VPC, S3, IAM, RDS/Aurora, Load Balancing, Lambda, and related cloud services.
• Production-level experience with Kubernetes, preferably Amazon EKS, including containerized workloads, networking, security, scalability, upgrades, and operational readiness.
• Strong experience with Infrastructure as Code, preferably Terraform, and infrastructure automation practices.
• Experience designing, building, and improving CI/CD pipelines, preferably GitLab CI/CD, for consistent, secure, and reliable deployments.
• Strong scripting and automation experience in Linux-based or cloud-native environments using Bash, Python, or a similar language.
• Ability to troubleshoot complex infrastructure, application, deployment, networking, security, and operational issues across multiple layers.
• Strong written and verbal English communication skills, including the ability to clarify ambiguity, align stakeholders, document decisions, communicate risk, and influence without formal authority.
• Demonstrated curiosity, ownership, technical judgment, and the ability to balance strategic improvement with hands-on delivery.
• Demonstrated hands-on DevSecOps experience embedding security controls into CI/CD pipelines, cloud infrastructure, container platforms, or developer workflows.
• Strong experience with IAM design and governance, least privilege, access lifecycle controls, secrets management, and security automation in AWS-based environments.
• Experience with static application security testing, software composition analysis, open-source dependency governance, vulnerability management, and secrets detection using enterprise or equivalent tools.
• Experience implementing policy as code, Infrastructure as Code scanning, container or Kubernetes security, and secure software supply chain controls.
• Ability to communicate security risk and remediation expectations clearly to engineers, product stakeholders, architects, and leadership without relying on security jargon or formal authority.
• Five or more years of experience in DevOps, Cloud, Platform, Infrastructure, Security, or Software Engineering environments.
• Experience working in an enterprise or global organization with distributed teams.
• Experience collaborating with Security, Compliance, Enterprise Architecture, Cloud Platform, SRE, vendor, and product teams.
• Experience with Datadog, CloudWatch, SonarQube/SonarQ, JFrog, Veracode, LaunchDarkly, Helm, Ansible, secrets management, or similar platforms.
• Familiarity with application stacks such as PostgreSQL, .NET, Angular, APIs, or cloud-native microservices.
• Relevant AWS, Kubernetes, Terraform, DevOps, Platform Engineering, or Security certifications.
• Experience mentoring engineers, raising technical standards, and enabling adoption through documentation, coaching, reusable examples, and hands-on collaboration.
• Experience supporting ISO 27001, audit readiness, secure software development lifecycle practices, or regulated environments.
• Experience with Veracode, SonarQube/SonarQ, JFrog, GitLab security capabilities, AWS security services, Open Policy Agent, Gatekeeper, or equivalent tools.
• Familiarity with threat modeling, security architecture reviews, SBOM, artifact signing, provenance, or supply chain security frameworks.
• Relevant Cloud Security, DevSecOps, Application Security, Kubernetes Security, or Information Security certifications.