Senior DevSecOps Engineer: Cloud Security & Automation Lead

Helpware; Argentina; Híbrido; ARS 178.643.000 - 267.965.000; Jornada completa

Descripción de la vacante

Helpware is seeking a hands-on Senior DevSecOps Engineer to help build secure, scalable cloud infrastructure, Kubernetes platforms, and CI/CD pipelines. You will work with engineering and platform teams to integrate security into the software delivery lifecycle and promote secure-by-default practices.

The role emphasizes security automation, IaC, workload identity, SBOMs, and vulnerability management, with a focus on practical engineering and automation in regulated or audited environments.

Formación

• 5+ years in DevSecOps, DevOps, Cloud Security, Platform Engineering or related role with security engineering and automation responsibility.
• Strong hands-on experience securing AWS or Google Cloud including IAM, workload identity, networking, encryption, logging, and cloud-native security controls.
• Deep experience operating and securing Kubernetes and containerized workloads, including managed platforms such as Amazon EKS or Google Kubernetes Engine.
• Strong hands-on experience with Terraform including reusable modules, dependency management, policy enforcement, and safe change management.
• Strong understanding of CI/CD and release engineering, including artifact security, deployment controls, approval gates, trusted builds, and rollback strategies.
• Experience implementing automated security controls such as vulnerability and dependency scanning, container image scanning, secrets detection, policy-as-code, infrastructure scanning, cloud configuration assessment, and software supply-chain security.
• Strong scripting or programming skills for automation, integrations, tooling, and operational problem-solving.
• Experience in regulated or audited environments and translating HIPAA, SOC 2, PCI DSS, HITRUST, or SOX into engineering controls.
• Strong communication and technical leadership skills, balancing security, reliability, developer experience, maintainability, and delivery speed.
• English: B2+ or higher.

Responsabilidades

• Integrate security into cloud infrastructure, Kubernetes platforms, CI/CD pipelines, and developer self-service workflows.
• Design and implement secure-by-default patterns for IAM, workload identity, secrets management, network security, infrastructure as code, application deployment, and workload protection.
• Assess current security landscape, identify gaps and risks, and establish scalable security practices within DevOps and platform teams.
• Build automated, risk-based security guardrails across source control, container builds, infrastructure changes, and application deployments using policy-as-code.
• Strengthen Kubernetes, container, and software supply-chain security, including cluster configuration, workload isolation, ingress, admission controls, runtime protection, dependency management, SBOMs, artifact signing, and build provenance.
• Partner with engineering teams to identify, prioritize, and remediate vulnerabilities and security misconfigurations across cloud, Kubernetes, and CI/CD environments.
• Support security incident response across infrastructure and delivery systems, including investigation, containment, recovery, and post-incident improvements.
• Translate security, regulatory, and audit requirements into practical and maintainable engineering controls.
• Create automation, documentation, runbooks, and security standards, while mentoring engineers on DevSecOps best practices.

Conocimientos

Security engineering

Automation

Cloud security

Kubernetes security

Policy-as-code

Herramientas

AWS

GCP

Terraform

Kubernetes

Descripción del empleo

Helpware is seeking a hands-on Senior DevSecOps Engineer to help build secure, scalable cloud infrastructure, Kubernetes platforms, and CI/CD pipelines. You will work with engineering and platform teams to integrate security into the software delivery lifecycle and promote secure-by-default practices.

The role emphasizes security automation, IaC, workload identity, SBOMs, and vulnerability management, with a focus on practical engineering and automation in regulated or audited environments.