Cloud Security Engineer - DevSecOps (AWS/K8s)

Nominal; New York (NY); Presencial; USD 208.000 - 245.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

100% coverage of medical, dental, and

Unlimited PTO and sick leave

Free lunch, snacks, and coffee

Professional Development Stipend

In‑office hardware lab with a $250dev

Annual company retreat

12 weeks parental leave

Fertility and family planning ($15,000

Wellness stipend ($100/month)

$500/year hardware sensor stipend

401(k)

Employee-friendly equity terms

In‑office 5 days per week

Descripción de la vacante

Nominal, a leader in Hardware Intelligence Platform, is seeking a Cloud, Deployments & DevSecOps Engineer in the United States. You’ll secure and deploy across AWS, GovCloud, customer-hosted clouds and on‑prem, owning security controls and compliance evidence for federal-grade deployments.

You will build guardrails and automation, partnering with engineering to embed security into deployment pipelines, infrastructure as code, and container security standards.

Formación

• Deep AWS security experience with hands-on cloud engineering.
• Strong Kubernetes experience, including securing clusters and workloads.
• Experience implementing cloud identity, access and network security controls.
• Experience building or operating cloud logging, monitoring and threat detection.
• Experience with infrastructure as code and security automation.
• Experience working directly with engineering teams to implement and maintain production security controls.

Responsabilidades

• Design and implement security controls across AWS, AWS GovCloud, customer-hosted clouds and on-premises deployments.
• Develop secure cloud architecture, including landing zones, service control policies and security boundaries.
• Harden Kubernetes and EKS environments, including workload identity, network policies and runtime security.
• Build centralized logging, monitoring, dashboards and detection capabilities across deployments.
• Develop cloud detection and response workflows, triage cloud security findings and support incident response and recovery.
• Implement infrastructure-as-code guardrails, policy-as-code, drift detection and continuous compliance automation.
• Improve deployment pipeline security through artifact signing, admission policies and software supply chain controls.
• Develop container and base-image security standards, including images that meet applicable FIPS requirements.
• Partner with engineering to obtain and integrate available security telemetry from customer environments.
• Support FedRAMP and other federal deployment requirements through technical controls and evidence.

Conocimientos

AWS security

Kubernetes

Cloud security controls

Logging & monitoring

Infrastructure as code

Collaboration

Herramientas

CKS

Azure

FedRAMP

CI/CD security

Descripción del empleo

Nominal, a leader in Hardware Intelligence Platform, is seeking a Cloud, Deployments & DevSecOps Engineer in the United States. You’ll secure and deploy across AWS, GovCloud, customer-hosted clouds and on‑prem, owning security controls and compliance evidence for federal-grade deployments.

You will build guardrails and automation, partnering with engineering to embed security into deployment pipelines, infrastructure as code, and container security standards.