Senior DevSecOps Engineer

Job summary

This senior infrastructure engineer builds and operates production infrastructure while owning security and compliance programs that protect PII and PHI in litigation records. The role spans AWS, Kubernetes, Terraform, CI/CD, and observability, with responsibility for SOC 2, HIPAA, and GDPR controls, IAM, automated evidence collection, and vulnerability remediation across infrastructure and application code.

Benefits

Qualifications

• At least five years of infrastructure, platform, or SRE engineering experience.
• Direct ownership of security and compliance work in an established program.
• Hands-on experience with AWS, Kubernetes, and Terraform.
• Ability to develop and ship production code.
• Experience supporting SOC 2, HIPAA, and GDPR audits from the engineering side.
• Proven experience remediating vulnerabilities across infrastructure and software.
• Experience designing and operating cloud IAM and access controls.
• Ability to take ownership of ambiguous, cross-functional problems and establish processes.
• Ability to communicate actionable security and compliance guidance to engineers.

Responsibilities

• Own SOC 2, HIPAA, and GDPR programs.
• Scale compliance through automated evidence collection, remediation, and continuous control monitoring.
• Build and operate cloud, Kubernetes, and Terraform infrastructure, including CI/CD and observability.
• Develop production tooling and automation.
• Design and maintain IAM across cloud, source control, and internal tools.
• Maintain least-privilege access, access reviews, and auditability.
• Identify and remediate vulnerabilities across infrastructure and application code.

Skills

Degrees

Work schedule

Industry

Relocation