Senior DevSecOps

Annual Compensation: $170000 - $200000

Position Type: Full-Time Remote

Vermont Information Processing (VIP) is the leading technology provider to the beverage industry delivering route accounting warehouse delivery sales and business management platforms trusted by distributors bottlers and more than 1600 suppliers for over 50 years.

Backed by Warburg Pincus VIP is investing heavily in security as a first-class discipline across a growing family of companies. This is an opportunity to join at a pivotal moment with executive sponsorship a funded roadmap and visible impact at the board level.

VIP is seeking a Senior DevSecOps Engineer to own the security of how we build and run software secure our release pipeline and strengthen our cloud environments.

Today many of the foundational components are already in place. SonarQube and CAST are deployed CrowdStrike Cloud Security Posture Management (CSPM) is operational and a comprehensive cloud security framework has been established. The opportunity is to operationalize these investments embed security into engineering workflows and make secure development and cloud operations the default path across the organization.

This role works closely with engineering infrastructure cloud and security teams while providing guidance and mentorship to a junior Cloud Security Engineer located in India. The position has strong executive sponsorship and clear organizational support reflecting VIPs commitment to maturing its security program.

• Build and enforce secure-by-default software development and release processes across engineering teams.
• Implement and optimize code security controls including Static Application Security Testing (SAST) Software Composition Analysis (SCA) Dynamic Application Security Testing (DAST) and secrets scanning within CI/CD pipelines.
• Operationalize VIPs cloud security framework across AWS environments and acquired business units.
• Manage and mature CrowdStrike Cloud Security Posture Management (CSPM) capabilities including misconfiguration remediation and governance workflows.
• Centralize and strengthen cloud identity and access management through Okta integration and least-privilege access controls.
• Establish security standards for resource ownership classification and tagging across cloud environments.
• Implement and manage secrets management solutions with automated rotation and secure storage practices.
• Support data protection initiatives including encryption validation and data loss prevention controls.
• Partner with infrastructure and operations teams to enhance resilience strategies including immutable backup configurations and recovery planning.
• Create scalable security patterns standards and documentation that enable engineering teams to move quickly while maintaining security requirements.
• Mentor and support junior security team members while helping extend security programs across newly acquired business units.

• 5 years of experience across DevOps DevSecOps platform engineering cloud security or security engineering roles.
• Hands-on ownership of CI/CD platforms such as Jenkins Bitbucket Git-based pipelines GitHub Actions GitLab CI/CD or similar technologies.
• Experience implementing and supporting SAST DAST SCA secrets management and secure software delivery practices.
• Strong AWS security expertise including IAM Organizations networking KMS logging monitoring and cloud security posture management.
• Experience with Infrastructure as Code technologies such as Terraform or CloudFormation.
• Proficiency with scripting and automation using Python or similar languages.
• Strong analytical troubleshooting and problem-solving skills.
• Excellent communication and collaboration skills including experience working with distributed teams across multiple time zones.
• Ability to influence engineering and infrastructure teams while balancing security usability and business needs.

• Experience supporting Azure environments.
• Experience implementing Okta federation and identity solutions within AWS.
• Experience with Rubrik or similar enterprise backup and recovery platforms.
• Experience securing containerized workloads and modern cloud-native environments.
• AWS Security Specialty CCSP GIAC Cloud Security Kubernetes Security Specialist (CKS) or similar security certifications.

• Health Insurance
• Vision and Dental Expense Reimbursement
• 401(k) Match & Employer Contributions
• Life and Disability Insurance
• Health Savings and Flexible Spending Accounts
• Paid Parental Leave
• Discounted Gym Memberships
• Combined Time Off and Floating Holidays
• Flex and Remote Work Schedules
• On-site Child Care Center (VT)
• On-site Fitness Center (VT)
• On-site Health Clinic (VT)

Vermont Information Processing is an Equal Opportunity Employer. VIP is committed to providing a workplace free of discrimination and harassment. All qualified applicants will receive consideration for employment without regard to race color religion sex sexual orientation gender identity or expression national origin age disability genetic information marital status pregnancy veteran or military status or any other characteristic protected by applicable federal state or local law. Employment decisions are based on legitimate job-related factors.

VIP is committed to fair equitable and transparent pay. The compensation listed above reflects the anticipated pay for this role. Actual compensation will depend on job-related factors such as experience skills qualifications and work location and may be adjusted to comply with applicable state and local pay-transparency laws. VIP does not base compensation decisions on any legally protected characteristics and reviews its pay practices to support pay equity across the organization.

VIP provides reasonable accommodations to qualified individuals with disabilities throughout the application and employment process. If you need an accommodation to apply for or participate in an interview please contact

Applicants must be legally authorized to work in the location of the position.