Senior DevSecOps Engineer

Design, implement, and maintain secure, scalable infrastructure in AWS

Manage, secure, and improve Kubernetes-based environments, including production workloads

Build and maintain infrastructure as code using Terraform

Harden production systems across cloud, compute, container, identity, and network layers

Develop and maintain secure baseline configurations for infrastructure and platform services

Support vulnerability management, patching, remediation, and configuration compliance efforts across environments

Configure, administer, and patch both Linux and Windows VMs

Support identity and access management practices, including least privilege, role design, and privileged access controls

Contribute to administration and integration of Active Directory domains where needed

Partner with engineering teams to improve security within CI/CD pipelines, deployment workflows, and operational processes

Support compliance initiatives, audits, evidence collection, and technical control validation

Develop and maintain documentation, operational runbooks, technical standards, and playbooks

Monitor, troubleshoot, and resolve complex infrastructure and security issues with clear and timely communication

Participate in incident response and post-incident analysis when infrastructure or platform issues arise

Stay current on cloud, infrastructure, and security best practices that can improve platform resilience and delivery

Minimum of 5 years of experience in DevOps, DevSecOps, Infrastructure Engineering, Platform Engineering, or Security Engineering

Strong hands-on experience with AWS in production environments

Proven experience with Kubernetes, preferably in production

Strong experience with Terraform and infrastructure-as-code practices

Experience hardening production environments and implementing secure configuration standards

Experience supporting compliance frameworks, audit preparation, evidence gathering, and control validation

Experience with vulnerability remediation, system patching, and operational security practices

Experience configuring and maintaining both Linux and Windows virtual machines

Strong understanding of IAM, secrets management, network security, logging, monitoring, and operational controls

Proven experience improving or securing CI/CD pipelines and deployment workflows

Excellent troubleshooting and problem-solving skills in complex production environments

Strong communication skills with the ability to explain technical concepts to both technical and non-technical stakeholders