Full-Time Senior DevSecOps Engineer

• Design, implement, and manage secure, scalable cloud infrastructure (Azure, AWS, or GCP) in alignment with SOC 2, NIST, and HIPAA requirements.
• Use Terraform (required) to provision reproducible, compliant environments with reusable modules.
• Build and maintain automated pipelines using GitHub Actions for testing, deployment, and monitoring with security integrated at every stage
• Automate provisioning and governance with Entra/Okta/SCIM, enforce least-privilege access, MFA, and conditional access across tenants.
• Manage encryption keys, vulnerability scanning, logging, monitoring, and incident response.
• Develop observability practices (metrics, logging, alerting) and lead incident management with SIEMs, root cause analysis, and post-mortems.
• Partner with compliance teams to ensure infrastructure, policies, and controls align with regulatory requirements; support audits and certification renewals.
• Evaluate, select, and manage third-party tools and vendors that support DevSecOps practices.

• 10+ years’ experience in DevOps, Cloud Engineering, or Security Engineering, with at least 5 years focused on DevSecOps
• Proven expertise with cloud environments (Azure required; AWS or GCP also considered).
• Hands-on experience with CI/CD tools (GitHub Actions) and containerization/orchestration (Docker, Kubernetes).
• Deep understanding of Terraform (required)
• Experience working in regulated environments with SOC 2, HIPAA, NIST, or FedRAMP compliance frameworks.
• Experience building and maintaining SaaS platforms.

What is the last date for applying to the job?

Which countries are accepted for this remote job?