Senior DevSecOps Engineer

Job summary

The Senior DevSecOps Engineer leads AWS cloud security, infrastructure automation, and platform reliability, building secure, scalable, and highly available infrastructure. The role includes vulnerability remediation, infrastructure as code with Terraform or AWS CloudFormation, disaster recovery testing, CI/CD security, MongoDB administration, and monitoring with Datadog or CloudWatch.

Benefits

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related discipline.
• At least five years of experience in cloud infrastructure, DevSecOps, Site Reliability Engineering, or a related role.
• Hands-on experience with AWS services, infrastructure, security architecture, and security tools.
• Experience implementing infrastructure as code with Terraform or AWS CloudFormation.
• Experience managing CI/CD pipelines and integrating security into software delivery.
• Experience with vulnerability management, cloud security tools, and remediation.
• Experience with monitoring and observability tools such as Datadog or CloudWatch.
• Experience administering MongoDB in production environments.
• Experience supporting backup, disaster recovery, and business continuity planning.
• Familiarity with Python, JavaScript/TypeScript, and React.js is an asset.
• AWS certifications are preferred.

Responsibilities

• Design, implement, and maintain secure AWS cloud infrastructure.
• Remediate vulnerabilities identified through penetration tests, AWS security tools, and control assessments.
• Harden cloud environments and manage patches, prioritizing critical and high-severity vulnerabilities.
• Review AWS environments using the AWS Well-Architected Framework and recommend improvements.
• Manage AWS networking, infrastructure security, and governance.
• Develop and maintain infrastructure as code using Terraform or AWS CloudFormation.
• Automate infrastructure deployment and operational processes.
• Design and maintain backup and disaster recovery strategies; test recovery objectives.
• Monitor AWS environments, investigate security incidents, and improve detection and response.
• Secure CI/CD pipelines and integrate security throughout the software development lifecycle.
• Implement API security testing, including with OWASP ZAP.
• Administer MongoDB access, credentials, monitoring, performance, backups, and recovery.
• Improve cloud monitoring, logging, alerting, dashboards, and platform observability.

Skills

Certifications

Degrees

Languages

Work schedule

Industry

Relocation