Senior DevSecOps Engineer (Remote, Full-Time) [AS262]

Responsibilities

Maintain and strengthen AWS infrastructure, including ECS and EKS, supporting the company's platform.
Own automated tests and validation checks that ensure ongoing compliance with security frameworks, including SOC 2 and ISO 27001.
Identify and flag security compliance issues while collaborating with the engineering team rather than directly leading audit remediation.
Embed security thinking throughout the software development lifecycle.
Improve the security, reliability, and scalability of the platform infrastructure.
Deliver infrastructure solutions independently with minimal oversight.
Collaborate closely with software engineers to enable secure-by-design and dependable software delivery.
Make sound technical and infrastructure design decisions while iterating quickly.
Take full ownership of infrastructure initiatives and contribute to long-term platform stability.

Requirements

5+ years of experience in DevSecOps or a related role.
5+ years of overall DevOps/DevSecOps experience.
Strong experience with AWS, including ECS and EKS.
Strong experience with Terraform.
Strong experience with Kubernetes or container orchestration.
Strong experience with Docker.
Strong experience with Ansible.
Strong experience with Prometheus and Grafana.
Strong experience building and maintaining CI/CD pipelines and automation.
Good understanding of security best practices and compliance frameworks, including SOC 2 and ISO 27001.
Ability to work independently, make technical decisions, and deliver with minimal supervision.
Strong problem-solving skills and a product-focused mindset.
Experience working in a fast-paced environment.
Ability to collaborate effectively with software engineering teams.

Nice To Have

Experience with EKS specifically.
Experience working within a SaaS or technology product company.
Previous experience leading infrastructure projects or taking ownership of major infrastructure initiatives.
Broader exposure to security and compliance practices beyond core operational responsibilities.