Senior DevOps Engineer

The SecDevOps Engineer owns the development and management of secure, compliant cloud infrastructures across multiple cloud providers, enhancing automation, security, and observability to ensure robust cloud operations and continuous compliance with security standards with NIST 800-53.

\n\n

Key Responsibilities

\n

\n
• Support and operate Zero Trust Network Access (ZTNA) architectures using Zscaler ZPA/PRA, including app connectors, privileged remote access, and private application boundaries.
\n
• Integrate federated identity providers (Okta, Azure AD/Entra ID, AWS IAM Identity Center), support multicloud identity migrations, and enforce least privilege access and automated RBAC across cloud environments.
\n
• Manage privileged credentials, API tokens, and secrets lifecycle in HashiCorp Vault, including automated credential rotation.
\n
• Build and maintain multitenant cloud infrastructure across AWS, Azure, and GCP using Infrastructure as Code (Terraform primary, plus Ansible and CloudFormation), including networking, security groups, and IAM roles
\n
• Develop secure CI/CD and GitOps pipelines (GitHub Actions, GitLab CI, Azure DevOps, Jenkins, ArgoCD) with Policy as Code (OPA, HashiCorp Sentinel, Azure Policy) and embedded SAST, SCA, and container vulnerability scanning.
\n
• Build, deploy, and troubleshoot containerized workloads on Kubernetes (EKS, AKS, GKE) using Helm, ArgoCD, and Kustomize.
\n
• Support continuous monitoring, tracking, and remediation, and automate audit evidence collection and compliance reporting for controls.
\n
• Define and report on SLIs/SLOs for critical cloud security services, and lead incident response, on call troubleshooting, and root cause analysis.
\n

\n\n

Core Qualifications & Requirements

\n

\n
• 5+ years of professional experience in SecDevOps, Cloud Security Engineering, Platform Engineering, or DevOps.
\n
• Hands-on experience with at least one major hyperscaler (preferably AWS); working knowledge of Azure and GCP.
\n
• Advanced skills in Infrastructure as Code (Terraform, Ansible, CloudFormation) and scripting languages (Python, Bash, PowerShell).
\n
• Proven experience managing enterprise identity/access solutions (Okta, Entra ID) and secrets management platforms (HashiCorp Vault, AWS KMS, Azure Key Vault).
\n
• Familiarity with security tooling such as endpoint protection (EDR), CSPM (Cloud Security Posture Management), and vulnerability scanners (CrowdStrike, Wiz, Qualys).
\n
• Strong understanding of containerization and orchestration platforms (Docker, Kubernetes).
\n
• Practical knowledge of NIST 800-53, SOC 2 frameworks, or comparable compliance standards. Nice-to-Have Qualifications
\n
• Certifications such as HashiCorp Certified: Terraform Associate, AWS Certified SysOps Administrator, Solutions Architect, or Security+.
\n
• Experience with additional cloud tools and automation frameworks.
\n