Jobs / Nominal
Cloud, Deployment & DevSecOps Engineer
Nominal · New York, NY, United States
New York, NY, United StatesFull time208,000-245,000 USD/yearlyOnsite
Remuneration
208,000-245,000 USD/yearly
Location
New York, NY, United States
Visa sponsorship
Not specified
Job summary
The Cloud, Deployments & DevSecOps Engineer builds security controls for a hardware engineering platform deployed across AWS, AWS GovCloud, customer-hosted clouds, and on-premises environments. The role secures Kubernetes and EKS, automates infrastructure guardrails and cloud detection, strengthens deployment pipelines and software supply chain protections, and supports FedRAMP and other federal requirements in partnership with engineering teams.
Benefits
Medical, dental, and vision insurance fully coveredUnlimited paid time off and sick leaveFree lunch, snacks, and coffeeProfessional development stipendHardware lab project stipend of $25012 weeks of parental leaveFertility and family planning benefit up to $15,000 lifetimeWellness stipend of $100 per monthHardware sensor stipend of $500 per year401(k)Employee-friendly equity terms
Qualifications
- Deep AWS security experience and hands-on cloud engineering and deployment experience
- Strong experience securing Kubernetes clusters and workloads
- Experience implementing cloud identity, access, and network security controls
- Experience building or operating cloud logging, monitoring, and threat detection
- Experience with infrastructure as code and security automation
- Experience partnering with engineering teams to implement and maintain production security controls
Responsibilities
- Design and implement security controls across cloud and on-premises deployments
- Develop secure cloud architecture, landing zones, service control policies, and security boundaries
- Harden Kubernetes and EKS clusters and workloads
- Build centralized logging, monitoring, dashboards, and detection capabilities
- Develop cloud detection and response workflows and support incident response and recovery
- Implement infrastructure-as-code guardrails, policy-as-code, drift detection, and continuous compliance automation
- Strengthen deployment pipeline security with artifact signing, admission policies, and supply chain controls
- Develop container and base-image security standards, including applicable FIPS requirements
- Integrate available security telemetry from customer environments
- Support FedRAMP and other federal deployment requirements with technical controls and evidence
Skills
AWSAzureEKSGCPKubernetesOracle CloudGitHub ActionsIAMTerraform
Certifications
Certified Kubernetes Security Specialist (CKS)
Work schedule
In-office 5 days per week
Industry
AerospaceDefenseManufacturingTransportationEnergyRobotics
Relocation
No