SecOps/DevOps Engineer

Job Description

SecOps/DevOps EngineerOverview

Were seeking a highly skilled SecOps/DevOps Engineer to join our technology team. This is a hands-on role at the intersection of security operations, infrastructure engineering, and compliance. The ideal candidate will be as comfortable writing secure deployment pipelines as they are interpreting NIST 800-53 or authoring internal security policies.

You'll help design, implement, and maintain secure systems across our infrastructure while supporting the company's data protection, compliance, and uptime requirements.Key Responsibilities

Build and maintain secure CI/CD pipelines and infrastructure-as-code (IaC) systems.

Implement security controls aligned with NIST, CIS, or FedRAMP frameworks.

Monitor infrastructure for vulnerabilities, configuration drift, and policy violations.

Collaborate with engineering teams to embed security throughout the SDLC.

Define, write, and maintain security policies and procedures, particularly around PII protection, access control, and audit logging.

Assist in incident response planning and investigation.

Perform internal risk assessments and support audits as needed.

Automate compliance tasks where possible.Required Qualifications

3-7 years in a DevOps, Site Reliability, or Security Engineering role.

Strong understanding of network security, cloud architectures (AWS, Azure, or GCP), and Linux systems.

Familiarity with security frameworks such as NIST, SOC 2, or ISO 27001.

Experience handling PII, including data classification and secure data practices.

Proven ability to author security documentation, policies, and procedural guides.

Proficiency in scripting (e.g., Python, Bash, or Go) and automation tooling (e.g., Terraform, Ansible).

Strong Git/GitOps fundamentals and experience with CI tools (e.g., GitHub Actions, GitLab CI).Preferred (Nice to Have)

Certifications like CISSP, GIAC, or AWS Security Specialty.

Familiarity with container security (e.g., Proxmox, Docker, Kubernetes, Falco, or Kyverno).

Knowledge of SIEM and EDR tools, vulnerability management platforms.

Experience with compliance automation tooling.Who You Are

You think in terms of threat modeling and resilience.

You're as good at writing as you are at scripting.

You're proactive, collaborative, and comfortable driving a security culture.

Full-time