Staff DevSecOps Engineer

Job summary

The Staff DevSecOps Engineer advances security across backend services and cloud platforms by embedding security-by-design into engineering workflows. The role builds secure CI/CD pipelines, automates vulnerability management and remediation, develops cloud monitoring and incident response capabilities, and partners with engineering teams on security architecture reviews. The work spans AWS and Google Cloud Platform, containerized deployments, and cloud governance.

Benefits

Qualifications

• At least 5 years of experience in DevOps, cloud infrastructure, platform engineering, or a related field, including architecture-level experience.
• Hands-on experience implementing DevSecOps practices and enterprise security controls.
• Expertise in CI/CD pipeline architecture, automation, and secure software delivery.
• Experience with AWS or Google Cloud Platform.
• Knowledge of Infrastructure as Code tools.
• Experience with Docker, Kubernetes, container orchestration, and container security.
• Understanding of IAM, RBAC, secrets management, encryption, certificates, and network security.
• Knowledge of NIST, CIS Benchmarks, and OWASP.
• Experience with scripting and automation languages.
• Strong troubleshooting, analytical, communication, and stakeholder management skills.

Responsibilities

• Design and implement DevSecOps practices and security controls across enterprise environments.
• Architect and maintain CI/CD pipelines for secure software delivery.
• Use cloud platforms to optimize infrastructure.
• Secure deployments using Docker, Kubernetes, and container orchestration.
• Automate tasks with scripting languages.
• Lead vulnerability management across cloud, application, container, and infrastructure environments.
• Develop cloud security monitoring, alerting, threat detection, and incident response workflows.
• Implement cloud security posture management, continuous control monitoring, and automated remediation.
• Partner with engineering teams on architecture reviews and security design assessments.
• Promote security best practices through technical leadership and organization-wide enablement.

Skills

Certifications

Industry

Relocation