DevSecOps Engineer

About the job

Responsibilities

• Design and maintain scalable, automated, and secure AWS infrastructure using OpenTofu/Terraform.

• Support networking, identity, compute, storage, and Kubernetes services.

• Implement security best practices, including:

• System hardening

• Vulnerability and secrets management

• Least-privilege access

• Logging and monitoring

• Secure-by-default patterns

• Own engineering tickets from requirements through implementation, testing, rollout, documentation, and handoff.

• Independently manage work, resolve routine blockers, and maintain progress.

• Work with Kubernetes and container technologies such as Docker and Podman.

• Use AI-assisted development tools to improve coding, testing, documentation, and problem-solving.

• Review, test, and validate all AI-generated code and recommendations.

• Develop automated unit, integration, and validation tests for infrastructure code.

• Build automation and engineering utilities using Python and Bash.

• Participate in code reviews, design reviews, troubleshooting, and standards development.

• Collaborate with technology governance teams on engineering processes, security controls, and audit requirements.

• Maintain continuity across existing platform initiatives and active workstreams.

Required Qualifications

• 10+ years of experience in platform engineering, systems engineering, DevOps, SRE, cloud engineering, or a related field.
• Significant hands-on AWS experience supporting production workloads and platform services.
• Advanced OpenTofu/Terraform and Infrastructure as Code experience.
• Strong Kubernetes deployment, operations, support, and troubleshooting skills.
• Strong Docker and/or Podman experience.
• Proficiency in Python and Bash.
• Experience developing, testing, reviewing, and maintaining production-quality infrastructure code.
• Practical knowledge of hardening, vulnerability management, least privilege, secrets management, logging, and monitoring.
• Ability to deliver complex engineering work from requirements through production with limited supervision.
• Strong self-management, problem-solving, communication, and documentation skills.
• Experience with AI-assisted development tools such as GitHub Copilot, Claude Code, Codex, or comparable platforms.
• Ability to validate AI output through human review, testing, quality gates, and security standards.

Preferred Qualifications

• Experience with SOC 2, ISO 27001, NIST 800-53, or similar security frameworks.
• Experience with enterprise CI/CD platforms and secure delivery-pipeline design.
• Experience with automated Infrastructure as Code testing and validation.
• Experience integrating AI assistance into established engineering workflows while maintaining human review, security, testing, and change controls.