Sr DevSecOps Engineer

We're looking for a Sr DevSecOps Engineer with strong network security expertise to help build, secure, and maintain our cloud infrastructure.  You'll build infrastructure automation, CI/CD pipelines, and defensive security measures to ensure our systems are reliable, scalable, and secure.

What You'll Do

•   Design, implement, and maintain cloud infrastructure (GCP)
•   Build and optimize CI/CD pipelines for automated testing and deployment
•   Implement network security controls, including firewalls, VPNs, and segmentation
•   Monitor systems for security threats and respond to incidents
•   Manage container orchestration (Kubernetes, Docker)
•   Automate infrastructure provisioning using Terraform
•   Conduct security audits and implement remediation measures
•   Implement observability solutions (logging, metrics, tracing, alerting)
•   Collaborate with development teams on secure architecture decisions
•   Optimize cloud costs and resource utilization
•   Maintain disaster recovery and backup strategies

What You Need

•   5+ years of experience in DevSecOps, SRE, or infrastructure engineering
•   Strong understanding of networking (TCP/IP, DNS, load balancing, CDNs)
•   Experience with security tools (WAFs, CNAPP, IDS/IPS, SIEM, SOAR)
•   Extensive knowledge of secure best practices for Cloud based Infrastructure
•   Proficiency in scripting (Python, Bash, Go)
•   You speak and write in Infrastructure as code, with an enthusiasm for automation, and a passion for scalable and reproducible security practices 
•   You possess broad security knowledge to connect the dots across domains and identify holistic ways to decrease the overall threat surface
•   Have a strong grasp of offensive security to anticipate risks from an adversary's perspective, not just check compliance boxes
•   Experience with compliance frameworks (SOC 2, ISO27001, HIPAA, or PCI-DSS)
•   Proficiency with monitoring and observability tools (Prometheus, Grafana, PagerDuty)
•   Knowledge of secrets management and identity/access management
•   Excellent communication skills
•   Bring experience with modern application stacks, infrastructure, and security tools to implement pragmatic defenses
•   Experience with vulnerability management and threat hunting

Bonus Points

•   Experience with Typescript and SQL
•   Security certifications (CISSP, CEH, AWS Security Specialty)
•   Experience with zero-trust architecture
•   Background in penetration testing or vulnerability assessment

For this position we are targeting a base pay between $185,000-$243,000.  Actual compensation offered will be determined by factors such as job-related knowledge, skills, and experience.