DevSecOps Engineer

Role Overview:

As a Senior DevSecOps Engineer, you will be responsible for managing production

environments at scale, implementing security best practices, and ensuring smooth operations

across cloud infrastructure. You will collaborate closely with development and security teams to

design and enforce policies, automate workflows, and drive continuous improvements in

security and operational efficiency.

Key Responsibilities:

● Manage and maintain production environments at scale with a strong focus on security,

reliability, and performance.

● Design, implement, and maintain AWS IAM policies, roles, and permissions to enforce

least-privilege access.

● Develop and enforce AWS Security Policy frameworks across EKS clusters and other

cloud resources.

● Implement and maintain infrastructure-as-code (IaC) using tools like Terraform,

CloudFormation, or CDK.

● Collaborate with development teams to integrate security into CI/CD pipelines.

● Monitor security posture and operational health, identifying risks, vulnerabilities, and

compliance gaps.

● Automate operational and security tasks to improve efficiency and reliability.

● Provide guidance and best practices for secure cloud architecture and deployment

strategies.

Required Skills & Qualifications:

● 5+ years of experience in DevSecOps, Cloud Security, or Site Reliability Engineering.

● Strong expertise in AWS, including IAM, EKS, VPC, Security Groups, CloudTrail, and

GuardDuty.

● Hands-on experience with security policy frameworks in AWS.

● Proficiency in container orchestration platforms like Kubernetes/EKS.

● Experience with CI/CD tools and pipelines (Jenkins, GitHub Actions, GitLab CI, etc.).

● Strong scripting skills (Python, Bash, or equivalent) for automation.

● Knowledge of monitoring and logging solutions (Prometheus, Grafana, ELK stack,

CloudWatch).

● Familiarity with compliance standards such as SOC2, ISO27001, or GDPR is a plus.

Preferred Qualifications:

● Experience in managing production systems at scale with high availability.

● Knowledge of secrets management (HashiCorp Vault, AWS Secrets Manager).

● Experience in vulnerability scanning and security audits.

● AWS certifications like AWS Certified Security Specialty or DevOps Engineer are a plus.