Staff Engineer, DevSecOps

Accountabilities:

• Design, develop, test, deploy, and maintain scalable, secure, and reliable software services, with a focus on backend systems, microservices, and APIs.
• Contribute to architecture and design decisions involving cloud architecture, application security, scalability, reliability, and technology selection.
• Build and maintain CI/CD pipelines that automate software builds, testing, security validation, deployments, and releases across development and production environments.
• Implement and manage Infrastructure as Code using Terraform, CloudFormation, or equivalent technologies to provision and maintain AWS infrastructure securely and consistently.
• Develop and operate containerized applications and supporting platforms using Docker and Kubernetes/EKS.
• Integrate DevSecOps practices throughout the software development lifecycle, including automated security testing, vulnerability scanning, secrets management, and compliance controls.
• Deploy and maintain observability capabilities for microservices and APIs, including centralized logging, metrics, distributed tracing, alerting, and performance monitoring.
• Troubleshoot complex application, infrastructure, deployment, and production issues, perform root-cause analysis, and implement preventative improvements.
• Conduct code, architecture, infrastructure, and security reviews to identify vulnerabilities, reliability risks, and opportunities for improvement.
• Participate in vulnerability management, threat assessments, security reviews, and remediation activities across applications, dependencies, containers, and cloud infrastructure.
• Maintain AWS security, compliance, governance, and access-control practices in accordance with organizational policies and applicable standards.
• Create and maintain technical documentation, including architecture diagrams, deployment procedures, runbooks, API documentation, security controls, and operational procedures.
• Collaborate with software engineers, architects, security teams, infrastructure teams, and other stakeholders to establish secure and reliable engineering practices.
• Mentor engineers and promote a culture of automation, security, reliability, continuous improvement, and knowledge sharing.
• Evaluate emerging technologies and recommend tools and practices that improve productivity, security, scalability, and operational efficiency.
• Contribute to technical estimation, prioritization, planning, and delivery of medium-to-large engineering initiatives while reducing technical debt and operational complexity.

Requirements:

• Strong professional experience in DevSecOps, cloud engineering, software engineering, infrastructure automation, and secure software delivery.
• Strong proficiency in Python and Kubernetes, which are required for the role.
• Hands-on experience with AWS, CI/CD, Infrastructure as Code, containers, automation, and cloud security practices.
• Experience with technologies such as Groovy, Bash, Go, Maven, Jenkins, Terraform, and Docker.
• Strong understanding of microservices, APIs, backend systems, application security, scalability, reliability, and production operations.
• Experience implementing CI/CD pipelines and integrating automated testing, security validation, vulnerability scanning, and compliance checks.
• Experience with Terraform, CloudFormation, or comparable Infrastructure as Code technologies.
• Strong knowledge of Kubernetes/EKS and containerized application environments.
• Experience with observability, centralized logging, metrics, tracing, alerting, and performance monitoring.
• Ability to troubleshoot complex production and infrastructure issues and conduct effective root-cause analysis.
• Strong understanding of cloud security, access controls, vulnerability management, threat assessment, and security remediation.
• Ability to work independently on ambiguous and complex initiatives while collaborating effectively across technical teams.
• Strong communication, mentoring, knowledge-sharing, and technical leadership skills.
• Experience working with large-scale, production-ready systems is a plus.
• Familiarity with PostgreSQL, GitHub Actions, Camunda, FHIR, or AI/ML is a plus.
• U.S. citizenship or Green Card required; new sponsorship is not available.
• Must have resided in the United States for at least the past three years.
• Must be able to meet the requirements for a position of Public Trust, including successfully completing a U.S. government background investigation.

Benefits:

• Remote-first, remote-only work culture.
• Four weeks of paid time off annually, prorated during the first year based on start date.
• 10 paid floating company holidays.
• Flexible work schedule.
• Work-from-home setup, including a MacBook.
• Collaborative and learning-focused work environment.
• Medical, dental, and company-paid vision insurance.
• Optional HSA with eligible medical plans and a company contribution.
• Company-paid basic life and AD&D insurance.
• Company-paid short- and long-term disability insurance.
• Optional critical illness and accident insurance.
• 401(k) plan with a 3% safe harbor contribution.
• Wellness resources and virtual care.
• Employee discounts and additional perks.