DevSecOps Engineer

Athenaworks; Estado de México; Presencial; MXN 1.019.000 - 1.529.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Payment in USD

Flexible schedule

Learning budget

Remote work

Descripción de la vacante

Athenaworks is seeking a proactive DevSecOps Engineer to join a growing engineering team. You will build, maintain, and scale secure cloud infrastructure, CI/CD pipelines, and observability stacks with a security‑first mindset.

You will collaborate with a distributed team to integrate security into the full development lifecycle, handling Terraform IaC, Kubernetes hardening, and compliance efforts while delivering secure, scalable solutions for client projects.

Formación

• Proven experience in a DevSecOps or security‑focused engineering role.
• Familiarity with modern security tooling (vulnerability management, secrets management etc.).
• Strong understanding of shift-left security principles.
• 3+ years of experience in a DevOps or similar role.

Responsabilidades

• Integrate automated security scanning (SAST, DAST, container scanning) into CI/CD pipelines.
• Maintain and audit cloud infrastructure compliance (SOC2, HIPAA, GDPR) through automated policies.
• Implement security best practices within Terraform/IaC (security‑as‑code).
• Monitor and respond to cloud security incidents with security and compliance teams.
• Design and maintain AWS infrastructure (EC2, RDS, OpenSearch, EKS).
• Hardening Kubernetes clusters with network policies, RBAC, and secure pod standards.
• Collaborate on IaC maintenance using Terraform.
• Identify opportunities for automation in deployment and infra management.
• Document processes, infrastructure and decisions clearly.
• Partner with Information Security Lead on audits and security roadmap.

Conocimientos

DevSecOps

AWS

Kubernetes

Terraform

CI/CD

Security tooling

Shift-left security

Shell scripting

GitOps

Herramientas

Helm

Kustomize

FluxCD

GitLab CI

OpenSearch

Istio

Descripción del empleo

Job Description

Join Us to Shape the Digital World. We’re passionate about delivering cutting-edge technology to some of the world’s top startups and companies, powered by diverse and empowered teams of technologists eager to drive change.

As a fairness-driven organization, we are committed to creating a safe and inclusive environment where everyone, regardless of background, is treated with respect and equity.

We value people with strong technical skills who are collaborative, curious, results-driven, and take ownership. We embrace people who want to be themselves, enjoy daily flexibility, and are eager to grow, learn, and make a difference wherever the opportunity arises.

We’re seeking exceptional talent to work on immersive client projects that will challenge and hone your skills.

• Advanced English language proficiency is required for the role.

About The Role

We are looking for a proactive and skilled DevSecOps Engineer with 5+ years of hands‑on experience to join our growing engineering team. You'll be working closely with a small team of five DevOps engineers to build, maintain, and scale secure cloud infrastructure, CI/CD pipelines, and observability stacks. We value a security-first engineering mindset where you will integrate security‑as‑code practices throughout the entire development lifecycle. If your background is in DevOps, that is a great fit, provided you have always focused on and enjoyed the security aspects of your work, and are now ready to fully commit to a dedicated security role.

We value collaboration, strong communication, and a growth mindset: you'll be expected to contribute ideas, give and receive feedback, and work independently to ensure our client's platform is as secure as it is performant.

Your Responsibilities

• Integrate automated security scanning (SAST, DAST, container scanning) into CI/CD pipelines to ensure early detection of vulnerabilities.
• Maintain and audit cloud infrastructure compliance (e.g., SOC2, HIPAA, GDPR) through automated policies.
• Implement security best practices within Terraform/IaC to ensure "security-as-code" consistency.
• Monitor and respond to cloud security incidents, collaborating closely with security and compliance teams.
• Design, implement, and maintain cloud infrastructure primarily on AWS, with strong focus on EC2, RDS, OpenSearch, and EKS.
• Help to manage the Kubernetes clusters running our microservices (we have over a hundred in production) as well as the legacy EC2-based platform.
• Hardening Kubernetes clusters by implementing network policies, RBAC, and secure pod security standards to protect our microservices environment.
• Collaborate on maintaining our Infrastructure as Code (IaC) maintenance using Terraform.
• Identify opportunities for automation and optimization in deployment and infrastructure management.
• Document processes, infrastructure, and decisions clearly and effectively.
• Partner closely with our Information Security Lead on compliance audits, control evidence, and security roadmap prioritization, while reporting into the Head of DevOps for day-to-day work.

Partner closely with our Information Security Lead on compliance audits, control evidence, and security roadmap prioritization, while reporting into the Head of DevOps for day-to-day work.

Technical Skills (Must-haves)

• Proven experience in a DevSecOps or security‑focused engineering role.
• Familiarity with modern security tooling (vulnerability management, secrets management etc.).
• Strong understanding of "shift-left" security principles.
• 3+ years of experience in a DevOps or similar role.
• Deep experience with AWS services, especially IAM, EC2, RDS, EKS, and OpenSearch.
• Solid understanding and hands‑on experience with Kubernetes and related tooling (we use Helm, Kustomize and FluxCD but we value knowing and adhering to the GitOps practices more than the specific tools).
• Strong proficiency in Terraform for infrastructure automation.
• Experience in CI/CD tools.
• Bash or other shell scripting knowledge

Soft Skills & Mindset

• Highly proactive and self‑motivated; able to identify and address issues before they elevate.
• Strong communication skills, both verbal and written. We are a remote and distributed team so we focus on effective and async communication.
• Comfortable working collaboratively within a distributed team but also capable of driving tasks independently.
• Open to giving and receiving feedback, and eager to grow with the team.
• Analytical mindset with attention to detail and commitment to high-quality work.

Nice-to-Haves

• Experience with GitLab CI and GitLab in general.
• Familiarity with the JVM.
• Experience in cost optimization on AWS.
• Having worked with Istio or other service meshes.
• Exposure to GRC/compliance automation tooling (Drata, Vanta, or similar)
• Experience with Vulnerability/dependency scanning tools

A happy team makes all the difference. That’s why we offer:

• Payment in USD
• A truly flexible work schedule
• A Non-Working Pay Days Policy
• Learning Budget
• An opportunity for you to help create change in the industry
• And more!

Athenaworks is an inclusive and safe organization that values your technical skills, work experience, collaboration abilities, and potential to grow in your career. We proudly welcome self-taught individuals, as we focus solely on your ability to deliver exceptional work. We will never consider any irrelevant personal or professional aspects of your life.