Senior DevSecOps Engineer: Secure Cloud & CI/CD Expert

AthenaWorks LLC; México; Remote; MXN 2,216,000 - 3,323,000; Full time

Benefits offered by this job

Payment in USD

Flexible work schedule

Non-Working Pay Days Policy

Learning Budget

Impact on industry

Job summary

AthenaWorks LLC is seeking a proactive DevSecOps Engineer to join our distributed engineering team. You will build, secure, and scale cloud infrastructure, CI/CD pipelines, and observability stacks across AWS, Kubernetes, and IaC tooling, with a focus on security-as-code throughout the development lifecycle.

You will collaborate with security and compliance teams, implement shift-left security practices, and help drive threat prevention and rapid incident response in a fast-paced client

Qualifications

• Proven experience in a DevSecOps or security-focused engineering role.
• Familiarity with modern security tooling (vulnerability management, secrets management etc.).
• Strong understanding of shift-left security principles.
• 3+ years of experience in a DevOps or similar role.
• Deep experience with AWS services, especially IAM, EC2, RDS, EKS, and OpenSearch.
• Solid understanding and hands-on experience with Kubernetes and related tooling (we use Helm, Kustomize and FluxCD but we value knowing and adhering to the GitOps practices more than the specific tools).
• Strong proficiency in Terraform for infrastructure automation.
• Experience in CI/CD tools.
• Bash or other shell scripting knowledge

Responsibilities

• Integrate automated security scanning (SAST, DAST, container scanning) into CI/CD pipelines to ensure early detection of vulnerabilities.
• Maintain and audit cloud infrastructure compliance (e.g., SOC2, HIPAA, GDPR) through automated policies.
• Implement security best practices within Terraform/IaC to ensure "security-as-code" consistency.
• Monitor and respond to cloud security incidents, collaborating closely with security and compliance teams.
• Design, implement, and maintain cloud infrastructure primarily on AWS, with strong focus on EC2, RDS, OpenSearch, and EKS.
• Help to manage the Kubernetes clusters running our microservices (we have over a hundred in production) as well as the legacy EC2-based platform.
• Hardening Kubernetes clusters by implementing network policies, RBAC, and secure pod security standards to protect our microservices environment.
• Collaborate on maintaining our Infrastructure as Code (IaC) maintenance using Terraform.
• Identify opportunities for automation and optimization in deployment and infrastructure management.
• Document processes, infrastructure, and decisions clearly and effectively.
• Partner closely with our Information Security Lead on compliance audits, control evidence, and security roadmap prioritization, while reporting into the Head of DevOps for day‑to‑day work.

Skills

DevSecOps

Security in CI/CD

Terraform

Kubernetes

AWS

GitOps

SAST/DAST

Vulnerability Mgmt

Scripting (Bash)

Job description

AthenaWorks LLC is seeking a proactive DevSecOps Engineer to join our distributed engineering team. You will build, secure, and scale cloud infrastructure, CI/CD pipelines, and observability stacks across AWS, Kubernetes, and IaC tooling, with a focus on security-as-code throughout the development lifecycle.

You will collaborate with security and compliance teams, implement shift-left security practices, and help drive threat prevention and rapid incident response in a fast-paced client