DevOps & Security Engineer

Job summary

Own the build, deployment, security, and production reliability of cloud-hosted and on-premises software. Operate CI/CD pipelines and infrastructure as code, secure AWS and Azure environments, manage vulnerability remediation, and provide technical evidence for compliance, including scan results and software bills of materials. The role also supports Kubernetes, Terraform, Docker, OpenTelemetry, and AI workloads, with participation in incident response and a 24-hour on-call rotation.

Qualifications

• At least 5 years of experience in DevOps, site reliability, or platform engineering.
• Hands-on experience with CI/CD, containers, and infrastructure as code, including delivery of cloud and on-premises software.
• Production experience hosting and securing workloads on AWS.
• Working knowledge of code, dependency, and container vulnerability scanning, triage, and risk-based remediation.
• Knowledge of network segmentation, firewalls, WAF, TLS, VPN, and least-privilege access.
• Experience with production monitoring, on-call duties, incident response, and root cause analysis.
• Scripting and automation experience with Python, Bash, or PowerShell.
• Exposure to compliance frameworks such as CRA, SOC 2, or ISO 27001.

Responsibilities

• Own CI/CD pipelines, build infrastructure, and release automation for cloud-hosted and on-premises delivery.
• Maintain infrastructure as code and keep development and production environments consistent.
• Improve build, test, and deployment automation, including automated security and quality gates and UI and regression testing.
• Implement controls for AI coding tools, including secrets scanning, license and provenance checks, and audit logging.
• Report delivery-flow metrics, including review time, test cycle time, and escaped defects.
• Run production monitoring, alerting, incident response, and root cause analysis.
• Secure AWS and Azure hosting, identity and access, secrets, networks, firewalls, TLS, backups, and infrastructure configuration.
• Operate application infrastructure using Kubernetes, Terraform, Docker, cloud-init, nginx, and scheduled jobs.
• Monitor services and costs, including AI workloads, and establish appropriate guardrails.
• Manage vulnerability scanning, triage, prioritization, remediation, and reporting across code, dependencies, and containers.
• Provide compliance evidence, including scan results, remediation records, and software bills of materials.
• Participate in the incident response team and 24-hour on-call rotation.

Skills

Languages

Work schedule

Industry

Relocation