Remote DevSecOps Engineer — Secure CI/CD & IaC

BairesDev; Bogotá; Remote; COP 226,574,000 - 388,412,000; Full time

Benefits offered by this job

Remote work

Competitive USD/local pay

Home hardware & software setup

Flexible hours

Paid parental leave & vacations

Multicultural environment

Mentorship & growth opportunities

Job summary

BairesDev is hiring a DevSecOps Engineer to unify security with the development lifecycle. You will be the technical authority for secure infrastructure and deployment, balancing release velocity with robust defensive layers.

You will design automated gates in CI/CD, enforce security standards with Policy as Code, and monitor pipelines to reduce risks. This role is 100% remote with competitive compensation in USD or local currency.

Qualifications

• 4+ years in DevSecOps/DevOps or cybersecurity engineering.
• Proven experience integrating Snyk/Trivy/Aqua into CI/CD pipelines.
• Proficiency with Policy as Code using Open Policy Agent (OPA) and managing secrets.
• Deep understanding of container security and Infrastructure as Code (IaC) practices.
• Advanced proficiency in English.

Responsibilities

• Design and implement automated security gates within CI/CD pipelines to identify vulnerabilities during the build process.
• Develop and enforce organizational security standards using Policy as Code and advanced secrets management strategies.
• Integrate scanning tools for containers and infrastructure to maintain a secure and compliant production environment.
• Partner with development and operations teams to advocate for secure-by-design principles and remediate security flaws.
• Monitor the security posture of delivery pipelines to proactively manage risks and improve system resilience.

Skills

DevSecOps experience

CI/CD security

Policy as Code

Secrets management

Container security

IaC

English proficiency

Tools

Snyk

Trivy

Aqua

Job description

BairesDev is hiring a DevSecOps Engineer to unify security with the development lifecycle. You will be the technical authority for secure infrastructure and deployment, balancing release velocity with robust defensive layers.

You will design automated gates in CI/CD, enforce security standards with Policy as Code, and monitor pipelines to reduce risks. This role is 100% remote with competitive compensation in USD or local currency.