DevSecOps Engineer (Cloud Security and Compliance)
Core
Build, scale, and maintain secure cloud infrastructure and automated CI/CD pipelines while driving compliance readiness for SOC 2 and ISO 27001 certifications.
Role type
DevSecOps Engineer (Cloud Security and Compliance)
Builds
Production software, AI-enabled systems, and secure cloud infrastructure for North American clients
Domain
Cloud Security, Compliance, DevOps
Deliverable
production ML models | infrastructure
Required skills
AWS (IAM, networking, compute, logging), Terraform, Kubernetes (EKS), Helm, GitOps (ArgoCD), CI/CD pipeline configuration, SAST/DAST/dependency scanning, SOC 2/ISO 27001 compliance preparation
Preferred skills
AWS certifications (DevOps Engineer - Professional, SysOps Administrator Associate), compliance automation tools (Vanta, Drata, Secureframe), regulated industry experience (HIPAA)
Technologies
AWS, Terraform, Kubernetes, Helm, ArgoCD, Bitbucket Pipelines, GitLab CI, GitHub Actions, Security Hub
Responsibilities
Build and maintain secure cloud infrastructure and CI/CD pipelines; Implement access controls, secrets management, and security hardening; Standardize logging, monitoring, and audit trails; Drive secure SDLC practices including code and dependency scanning; Establish incident response procedures and post-incident reviews; Manage vulnerability patching for infrastructure and dependencies; Enhance backup, disaster recovery, and business continuity practices; Respond to client security questionnaires and support audits with technical evidence
Seniority
Mid-level, hands-on IC
