Remote DevSecOps Engineer - Secure CI/CD & Policy as Code

BairesDev; Antioquia; Remote; COP 259,597,000 - 389,395,000; Full time

Benefits offered by this job

100% remote

Competitive USD pay

Home setup provided

Flexible hours

Paid parental leave

Mentorship & growth

Job summary

BairesDev is seeking a DevSecOps Engineer to unify security with the development lifecycle, embedding protections into automated workflows and acting as the technical authority for secure infrastructure and deployment practices.

You will design automated security gates in CI/CD, implement Policy as Code with OPA, manage secrets, integrate Snyk/Trivy/Aqua, and collaborate with product teams to raise security standards while maintaining release velocity.

Qualifications

• 4+ years of experience in DevSecOps, DevOps, or Cybersecurity Engineering.
• Proven expertise in integrating security tooling such as Snyk, Trivy, or Aqua into CI/CD pipelines.
• Proficiency in implementing Policy as Code using Open Policy Agent (OPA) and managing secrets.
• Deep understanding of container security and Infrastructure as Code (IaC) best practices.
• Advanced proficiency in English.

Responsibilities

• Design and implement automated security gates within CI/CD pipelines to identify vulnerabilities during the build process.
• Develop and enforce organizational security standards using Policy as Code and advanced secrets management strategies.
• Integrate scanning tools for containers and infrastructure to maintain a secure and compliant production environment.
• Partner with development and operations teams to advocate for secure‑by‑design principles and remediate security flaws.
• Monitor the security posture of delivery pipelines to proactively manage risks and improve system resilience.

Skills

DevSecOps

CI/CD security

Policy as Code

Secrets management

Container security

English fluency

Tools

Snyk

Trivy

Aqua

Job description

BairesDev is seeking a DevSecOps Engineer to unify security with the development lifecycle, embedding protections into automated workflows and acting as the technical authority for secure infrastructure and deployment practices.

You will design automated security gates in CI/CD, implement Policy as Code with OPA, manage secrets, integrate Snyk/Trivy/Aqua, and collaborate with product teams to raise security standards while maintaining release velocity.