Cloud & Kubernetes DevSecOps Engineer

Istari Digital; United States; Remote; USD 135,000 - 220,000; Full time

Job summary

Istari Digital is seeking a DevSecOps Engineer to secure, harden, and scale our cloud infrastructure across AWS and Kubernetes. You will partner with platform, infrastructure, and security teams to improve security, compliance readiness, and reliability for production environments, including government-grade workloads.

The role requires hands-on cloud, Kubernetes, IaC, and security controls expertise, with experience in IAM, patching, vulnerability management, and CI/CD security to drive

Qualifications

• 5+ years of experience in DevOps, DevSecOps, Infrastructure Engineering, Platform Engineering, or Security Engineering
• Strong hands-on experience with AWS in production environments
• Proven experience with Kubernetes, preferably in production
• Strong experience with Terraform and infrastructure-as-code practices
• Experience hardening production environments and implementing secure configuration standards
• Experience supporting compliance frameworks, audit preparation, evidence gathering, and control validation
• Experience with vulnerability remediation, system patching, and operational security practices
• Experience configuring and maintaining both Linux and Windows virtual machines
• Strong understanding of IAM, secrets management, network security, logging, monitoring, and operational controls
• Proven experience improving or securing CI/CD pipelines and deployment workflows
• Excellent troubleshooting and problem-solving skills in complex production environments
• Strong communication skills with the ability to explain technical concepts to both technical and non-technical stakeholders
• Must live/work in the U.S.

Responsibilities

• Design, implement, and maintain secure, scalable infrastructure in AWS
• Manage, secure, and improve Kubernetes-based environments, including production workloads
• Build and maintain infrastructure as code using Terraform
• Harden production systems across cloud, compute, container, identity, and network layers
• Develop and maintain secure baseline configurations for infrastructure and platform services
• Support vulnerability management, patching, remediation, and configuration compliance efforts across environments
• Configure, administer, and patch both Linux and Windows VMs
• Support identity and access management practices, including least privilege, role design, and privileged access controls
• Contribute to administration and integration of Active Directory domains where needed
• Partner with engineering teams to improve security within CI/CD pipelines, deployment workflows, and operational processes
• Support compliance initiatives, audits, evidence collection, and technical control validation
• Develop and maintain documentation, operational runbooks, technical standards, and playbooks
• Monitor, troubleshoot, and resolve complex infrastructure and security issues with clear and timely communication
• Participate in incident response and post-incident analysis when infrastructure or platform issues arise
• Stay current on cloud, infrastructure, and security best practices that can improve platform resilience and delivery

Skills

AWS

Kubernetes

CI/CD security

IAM & Secrets Management

Vulnerability Remediation

Linux/Windows VM Admin

Incident Response

Security Compliance

Communication

Problem-Solving

Tools

Terraform

Ansible

PowerShell

Python

Active Directory

PostgreSQL

Job description

Istari Digital is seeking a DevSecOps Engineer to secure, harden, and scale our cloud infrastructure across AWS and Kubernetes. You will partner with platform, infrastructure, and security teams to improve security, compliance readiness, and reliability for production environments, including government-grade workloads.

The role requires hands-on cloud, Kubernetes, IaC, and security controls expertise, with experience in IAM, patching, vulnerability management, and CI/CD security to drive