DevSecOps Engineer

Renesas Electronics; California (MO); Hybrid; USD 150,000 - 160,000; Full time

Benefits offered by this job

Medical benefits

HSA / health savings account

Dental

Vision

Life insurance

AD&D

Pet insurance

Paid holidays

Job summary

Renesas Electronics is seeking a DevSecOps Engineer to build and operate the infrastructure platform that powers hardware teams. You will own environments, pipelines, clusters, and databases, ensuring scalable, secure, and reliable systems in a hybrid role based in Los Angeles, CA (3 days in office).

You’ll work with engineering, security, and product teams to design reproducible infrastructure, implement encryption and IAM controls, and automate deployments with GitHub Actions and Terraform.

Qualifications

• 7+ years of professional experience in DevOps, infrastructure engineering, or SRE with hands-on production ownership.
• Bachelor’s degree in Computer Science or related field (or equivalent practical experience).
• Deep expertise in AWS including GovCloud environments.
• Strong Kubernetes experience in production.
• PostgreSQL operational experience including migrations, backups, replication, and tuning.
• Experience designing and maintaining CI/CD pipelines (GitHub Actions).
• IaC proficiency with Terraform and containerization with Docker.
• Ability to design scalable, secure, and maintainable infrastructure.
• Excellent written and verbal communication; autonomous in fast-paced environments.

Responsibilities

• Environment ownership: manage multi-tenant and dedicated environments on AWS.
• CI/CD engineering: design and maintain GitHub Actions pipelines.
• Kubernetes operations: deploy, scale, and troubleshoot clusters.
• Database reliability: manage PostgreSQL provisioning, backups, and DR.
• Infrastructure as code: build reproducible infrastructure with Terraform and Docker.
• Security implementation: work with SecOps to enforce encryption, IAM, VPCs, logging.
• Observability: create dashboards and runbooks to reduce incidents.
• AI-driven infra: leverage AI workflows to accelerate deployments with validation.
• Continuous improvement: evaluate new tooling and provisioning strategies.

Skills

AWS

Kubernetes

PostgreSQL

GitHub Actions

Terraform

Docker

CI/CD design

Security

Communication

Autonomy

Education

Bachelor's degree in CS or related field

Tools

DuploCloud

Terraform

Docker

Kubernetes

GitHub Actions

Job description

About the role:

The DevSecOps Engineer on the Duro Design team builds and operates the infrastructure platform that enables hardware engineers to ship with confidence every day. You’ll own the environments, pipelines, clusters, and databases that power our modern stack—ensuring everything is scalable, secure, and reliable. This role partners closely with engineering, security, and product teammates in a fast-moving, highly autonomous environment.

We’re looking for engineers who think in systems, embrace automation, and leverage modern AI-powered workflows to deliver resilient, production-grade infrastructure. This is a hybrid role based in Los Angeles, CA (3 days per week in office).

A day in the life of our DevSecOps Engineer:

• Environment Ownership: Provision and manage multi-tenant and dedicated customer environments on AWS using DuploCloud, ensuring isolation, scalability, and reliability.
• CI/CD Engineering: Design, optimize, and maintain GitHub Actions pipelines to enable fast, reliable daily deployments with tight feedback loops.
• Kubernetes Operations: Deploy, scale, and troubleshoot production Kubernetes clusters, managing autoscaling policies, resource allocation, and health monitoring.
• Database Reliability: Own PostgreSQL operations including provisioning, migrations, backups, replication, performance tuning, and disaster recovery strategies.
• Infrastructure as Code: Build and maintain reproducible, version-controlled infrastructure using Terraform, Docker, and Kubernetes manifests.
• Security Implementation: Partner with SecOps and CISO leadership to implement encryption policies, IAM configurations, VPC segmentation, logging, monitoring, and compliance-driven infrastructure controls across AWS and GovCloud.
• Observability & Monitoring: Establish dashboards, alerts, and runbooks to maintain high availability and reduce incident frequency and recovery time.
• AI-Driven Infrastructure Engineering: Leverage AI-augmented workflows to generate infrastructure modules, refine deployment scripts, and accelerate operational improvements while maintaining rigorous validation standards.
• Continuous Improvement: Evaluate and integrate new tooling, improve provisioning strategies, and evolve infrastructure to support scale, compliance, and long-term system resilience.

Who We’re Looking For

Required:

• 7+ years of professional experience in DevOps, infrastructure engineering, or site reliability engineering with hands‑on production ownership
• Bachelor’s degree in Computer Science or related field (or equivalent practical experience)
• Deep expertise in AWS (EC2, EKS/ECS, RDS, S3, IAM, VPC, CloudWatch) including experience in commercial and GovCloud environments
• Strong Kubernetes experience managing clusters in production environments
• Hands‑on PostgreSQL operational experience including migrations, backup/recovery, replication, and performance tuning
• Experience designing and maintaining CI/CD pipelines, particularly GitHub Actions
• Infrastructure as code proficiency with Terraform and containerization tools such as Docker
• Strong systems thinking and ability to design scalable, secure, and maintainable infrastructure platforms
• Excellent written and verbal communication skills
• Comfort operating in autonomous, fast‑paced environments
• A service‑oriented mindset focused on enabling engineering teams to ship quickly and safely

Nice to Have:

• Experience with DuploCloud or similar tenant management platforms
• Experience building infrastructure for PLM, PDM, or hardware/manufacturing industry software
• Background supporting on‑premises or compliance‑driven deployments
• Familiarity with event‑driven systems (NATS, Redis, Kafka)
• Experience with observability tools such as Datadog, PostHog, or Sentry
• Knowledge of compliance frameworks such as SOC 2, FedRAMP, or ITAR
• Experience implementing zero‑downtime deployment strategies

How We Build

We don’t just ship features. We build platforms that make shipping inevitable.

At Duro, AI is integrated into our engineering workflows. Engineers leverage AI‑powered development environments to orchestrate tasks, structure infrastructure context, and accelerate delivery while maintaining high standards of operational excellence.

We value:

• Architectural intuition — understanding distributed systems before implementing them
• Precision in communication — clear infrastructure design produces reliable systems
• Pattern recognition — knowing when to abstract, automate, or simplify
• Operational discipline — building systems that are observable, resilient, and self‑healing
• Intellectual curiosity — continuously improving how we build and scale

The expected annual pay range for this position is $150,000‑$160,000. This position is also eligible for bonus opportunities. Final offer amount will be dependent on geographic location, applicable experience, and skillset of the candidate.

Renesas offers a full range of elective benefits including medical, health savings account (with applicable medical plan), dental, vision, health and/or dependent care flexible spending accounts, pre‑tax commuter benefits, life insurance, AD&D, and pet insurance. In addition to elective benefit options, benefited employees receive company‑paid life insurance and AD&D, LTD, short‑term medical benefits as well as paid sick time, paid holidays, and accrued paid vacation. New employees will attend a detailed benefit orientation to learn more about our many benefits and resources.

Renesas Electronics is an equal opportunity and affirmative action employer, committed to celebrating diversity and fostering a work environment free of discrimination on the basis of sex, race, religion, national origin, gender, gender identity, gender expression, age, sexual orientation, military status, veteran status, or any other basis protected by federal, state or local law.

Renesas Electronics deals with dual‑use technology that is subject to U.S. export controls regulations. Under these regulations it may be necessary for Renesas to obtain U.S. government export license prior to release of technology to certain persons. The decision whether or not to file or pursue an export license application is at the sole discretion of Renesas.