Senior DevSecOps Engineer

Job summary

Generac Power Systems is seeking a Senior DevSecOps Engineer to lead cloud security efforts, focusing on secure data transmission, processing, and storage for IoT devices. This role involves designing and implementing secure cloud infrastructure, automating compliance and security scanning, and ensuring adherence to industry standards like ISO 27001. The engineer will collaborate with various teams to integrate security throughout the cloud infrastructure and software development lifecycles.

Benefits

Qualifications

• Bachelor of Science degree in Computer Science, Cybersecurity, Engineering, or equivalent work experience.
• Five or more years of experience in cloud security, focusing on securing cloud infrastructure for data processing and storage.
• Strong understanding of cloud security, identity management, secure communication protocols (e.g., TLS), and data encryption.
• Proven experience with public cloud platforms (e.g., AWS, Azure, Google Cloud) for securing environments and services.
• Experience with SAST/DAST tools, container security, and vulnerability management.
• Knowledge of ISO 27001 compliance requirements for cloud environments.
• Experience with infrastructure as code, preferably Terraform.
• Certifications such as CISSP, CCSP, GCSA, or cloud-specific security/automation certifications are desirable.

Responsibilities

• Serve as a technical leader for the cloud team, supporting secure transmission, processing, and storage of data from IoT devices.
• Ensure all cloud services, networks, and data pipelines are secure and compliant with industry standards.
• Collaborate with the development team to automate compliance and security scanning throughout the software development lifecycle.
• Design and implement secure-by-default cloud infrastructure for IoT data and inter-service communication.
• Develop secure mechanisms for data storage and processing, including encryption and secure authentication frameworks.
• Enable provisioning of secure cloud infrastructure through infrastructure as code (IaC) modules aligned with security best practices.
• Ensure all data transmitted from IoT devices to the industrial cloud is encrypted and securely handled.
• Implement network-level security measures to protect cloud infrastructure from threats.
• Develop security protocols for managing data at rest and in transit across cloud services.
• Oversee the integration of cloud services to ensure secure data ingestion, storage, and processing.
• Implement and maintain secure access control mechanisms for cloud-based data.
• Manage secure API connections and authentication methods between cloud systems and enterprise services.
• Ensure industrial cloud infrastructure complies with security standards like ISO 27001 through regular audits.
• Conduct vulnerability assessments and security reviews of the cloud environment.
• Perform threat modeling and vulnerability assessments to identify potential attack vectors.
• Implement security monitoring and alerting systems to detect and respond to threats in real-time.
• Collaborate with cloud engineers, network security teams, DevOps, and other DevSecOps engineers to integrate security.
• Provide mentoring on secure cloud infrastructure design, development, and maintenance.
• Lead security awareness and training programs for teams managing Generac’s industrial cloud infrastructure.

Skills

Certifications

Degrees

Relocation