SecOps/DevOps Engineer
Overview
Were seeking a highly skilled SecOps/DevOps Engineer to join our technology team. This is a hands-on role at the intersection of security operations infrastructure engineering and compliance. The ideal candidate will be as comfortable writing secure deployment pipelines as they are interpreting NIST 800-53 or authoring internal security policies.
Youll help design implement and maintain secure systems across our infrastructure while supporting the companys data protection compliance and uptime requirements.
Key Responsibilities
- Build and maintain secure CI/CD pipelines and infrastructure-as-code (IaC) systems.
- Implement security controls aligned with NIST CIS or FedRAMP frameworks.
- Monitor infrastructure for vulnerabilities configuration drift and policy violations.
- Collaborate with engineering teams to embed security throughout the SDLC.
- Define write and maintain security policies and procedures particularly around PII protection access control and audit logging.
- Assist in incident response planning and investigation.
- Perform internal risk assessments and support audits as needed.
- Automate compliance tasks where possible.
Required Qualifications
- 3-7 years in a DevOps Site Reliability or Security Engineering role.
- Strong understanding of network security cloud architectures (AWS Azure or GCP) and Linux systems.
- Familiarity with security frameworks such as NIST SOC 2 or ISO 27001.
- Experience handling PII including data classification and secure data practices.
- Proven ability to author security documentation policies and procedural guides.
- Proficiency in scripting (e.g. Python Bash or Go) and automation tooling (e.g. Terraform Ansible).
- Strong Git/GitOps fundamentals and experience with CI tools (e.g. GitHub Actions GitLab CI).
Preferred (Nice to Have)
- Certifications like CISSP GIAC or AWS Security Specialty.
- Familiarity with container security (e.g. Proxmox Docker Kubernetes Falco or Kyverno).
- Knowledge of SIEM and EDR tools vulnerability management platforms.
- Experience with compliance automation tooling.
Who You Are
- You think in terms of threat modeling and resilience.
- Youre as good at writing as you are at scripting.
- Youre proactive collaborative and comfortable driving a security culture.