DevSecOps Engineer

Banyan Software; Littleton (CO); On-site; USD 80,000 - 120,000; Full time

Benefits offered by this job

Fully company-paid medical

401(k) with up to 4% company match

$1,200 annual wellness benefit

Monthly internet stipend

Job summary

Banyan Software is seeking a security-minded DevOps engineer based in Littleton, CO. You will own Kubernetes on AWS (EKS), lead security and compliance efforts, and integrate security into CI/CD pipelines.

The role emphasizes hands-on migration work, vulnerability management, and ongoing infrastructure hardening in a growing portfolio company. The position requires at least 2 years of DevOps or security experience, strong scripting, and the ability to work on-site on Tuesdays.

Qualifications

• 2+ years in DevOps, platform, SRE, or security engineering.
• Hands-on Kubernetes experience and solid AWS knowledge.
• Based in or able to commute to Littleton, CO, with in-office Tuesdays.

Responsibilities

• Build, operate, and improve Kubernetes on AWS (EKS).
• Lead and execute workload migrations onto EKS.
• Maintain and improve CI/CD pipelines with built-in security checks.
• Automate repeatable tasks and reduce manual work.

Skills

Kubernetes

AWS

Python/Bash scripting

Migration planning

Independent work

In-person Littleton

Tools

Terraform

Git workflows

Job description

Banyan Software is the best permanent home for software businesses that serve specialized industries, their employees, and their customers. With a buy-grow-and-hold-for-life approach and a permanent capital base, Banyan acquires and grows companies worldwide, honoring founder legacies and helping portfolio companies modernize through shared AI expertise and operational discipline. Founded in 2016, Banyan operates more than 120 portfolio companies across North and South America, Europe, and APAC, and has appeared on the Inc. 5000 list for six consecutive years. The Banyan Software Foundation, endowed with $100 million in Banyan stock, leverages technology to build a greener and more equitable world.

About 10x People:

At 10x People, we build cloud-based numbering software that helps telecom carriers, MVNOs, and CPaaS providers order, port, and manage phone numbers. Founded in 2013 and based in Littleton, Colorado, we serve customers across the U.S. and Canada, and our platform is part of their daily operations. We joined Banyan in September 2026, giving us a permanent home and the resources to keep growing.

The Role:

We're looking for an engineer who enjoys both building infrastructure and securing it. You'll own key parts of our AWS and Kubernetes platform while leading our day-to-day security and compliance work, with roughly half of your time on security.

It’s a broad role with real ownership, suited to someone who likes variety and wants to shape how a growing company runs. You’ll have a direct impact on how we build and ship.

Platform and DevOps

• Kubernetes on AWS: Build, operate, and improve our Kubernetes (EKS) infrastructure on AWS.
• EKS Migrations: Lead and execute workload migrations onto EKS.
• CI/CD with Security Built In: Maintain and improve CI/CD pipelines, building security checks directly into them.
• Automation: Automate wherever you can. If you do something manually twice, script it.

Security and Compliance

• SOC 2 Program: Run our SOC 2 program in Vanta: tracking controls, closing gaps, and keeping us audit-ready.
• Vulnerability Management: Own vulnerability management. Triage container CVEs from ECR scans and SAST/DAST findings, then fix them yourself or route them to the right team through GitHub.
• Monitoring and Response: Monitor and respond to AWS security alerts (GuardDuty, Security Hub) and externally reported issues.
• Access and Policy: Manage internal access control and maintain policies for secure development and data handling.
• Design and Threat Modeling: Join design reviews and threat modeling sessions with engineering.
• Security Awareness: Coordinate penetration tests, run tabletop exercises, and help keep the org security-aware.

Qualifications for success:

• 2+ years of experience in DevOps, platform, SRE, or security engineering.
• Hands-on production experience with Kubernetes, preferred.
• Solid working knowledge of AWS, including IAM, networking, and core services.
• Experience planning and executing infrastructure migrations.
• Proficiency in scripting (Python, Bash, or similar) and Git-based workflows.
• Ability to work independently, prioritize well, and figure things out without a playbook.
• Based in or able to commute to Littleton, CO, with in-office attendance on Tuesdays.

Nice to have:

• Experience supporting a SOC 2 or ISO 27001 audit, or using Vanta or a similar compliance platform.
• Familiarity with AWS security services such as GuardDuty, Security Hub, CloudTrail, and SCPs.
• Infrastructure as code experience (Terraform, CDK, or similar).
• Experience with SAST/DAST tools or GitHub Advanced Security.
• Relevant certifications (CKA, AWS Security Specialty, etc.).

Compensation & Posting Statement:

The expected base salary for this position is: $80,000 - $120,000 USD. Salary is based on a number of factors including market conditions, location and may vary depending on job-related skills and experience.
Benefits include fully company-paid medical for employees, a 401(k) with up to 4% company match, company-paid life and disability coverage, a $1,200 annual wellness benefit, flexible time off, paid holidays, a paid winter break, and a monthly internet stipend.

Diversity, Equity, Inclusion & Equal Employment Opportunity at Banyan: Banyan affirms that inequality is detrimental to our Global Teams, associates, our Operating Companies, and the communities we serve. As a collective, our goal is to impact lasting change through our actions. Together, we unite for equality and equity. Banyan is committed to equal employment opportunities regardless of any protected characteristic, including race, color, genetic information, creed, national origin, religion, sex, affectional or sexual orientation, gender identity or expression, lawful alien status, ancestry, age, marital status, or protected veteran status and will not discriminate against anyone on the basis of a disability. We support an inclusive workplace where associates excel based on personal merit, qualifications, experience, ability, and job performance.

Please Note: Banyan Software does not accept unsolicited resumes or applications submitted via email, LinkedIn, or other direct channels. All candidates must apply through our official Careers site to be considered for employment. Applications submitted outside of our applicant tracking system will not be reviewed.

Banyan Software is the best permanent home for software businesses that serve specialized industries, their employees, and their customers. With a buy-grow-and-hold-for-life approach and a permanent capital base, Banyan acquires and grows companies worldwide, honoring founder legacies and helping portfolio companies modernize through shared AI expertise and operational discipline. Founded in 2016, Banyan operates more than 120 portfolio companies across North and South America, Europe, and APAC, and has appeared on the Inc. 5000 list for six consecutive years. The Banyan Software Foundation, endowed with $100 million in Banyan stock, leverages technology to build a greener and more equitable world.

About 10x People:

At 10x People, we build cloud-based numbering software that helps telecom carriers, MVNOs, and CPaaS providers order, port, and manage phone numbers. Founded in 2013 and based in Littleton, Colorado, we serve customers across the U.S. and Canada, and our platform is part of their daily operations. We joined Banyan in September 2026, giving us a permanent home and the resources to keep growing.

The Role:

We're looking for an engineer who enjoys both building infrastructure and securing it. You'll own key parts of our AWS and Kubernetes platform while leading our day-to-day security and compliance work, with roughly half of your time on security.

It’s a broad role with real ownership, suited to someone who likes variety and wants to shape how a growing company runs. You’ll have a direct impact on how we build and ship.

Platform and DevOps

• Kubernetes on AWS: Build, operate, and improve our Kubernetes (EKS) infrastructure on AWS.
• EKS Migrations: Lead and execute workload migrations onto EKS.
• CI/CD with Security Built In: Maintain and improve CI/CD pipelines, building security checks directly into them.
• Automation: Automate wherever you can. If you do something manually twice, script it.

Security and Compliance

• SOC 2 Program: Run our SOC 2 program in Vanta: tracking controls, closing gaps, and keeping us audit-ready.
• Vulnerability Management: Own vulnerability management. Triage container CVEs from ECR scans and SAST/DAST findings, then fix them yourself or route them to the right team through GitHub.
• Monitoring and Response: Monitor and respond to AWS security alerts (GuardDuty, Security Hub) and externally reported issues.
• Access and Policy: Manage internal access control and maintain policies for secure development and data handling.
• Design and Threat Modeling: Join design reviews and threat modeling sessions with engineering.
• Security Awareness: Coordinate penetration tests, run tabletop exercises, and help keep the org security-aware.

Qualifications for success:

• 2+ years of experience in DevOps, platform, SRE, or security engineering.
• Hands-on production experience with Kubernetes, preferred.
• Solid working knowledge of AWS, including IAM, networking, and core services.
• Experience planning and executing infrastructure migrations.
• Proficiency in scripting (Python, Bash, or similar) and Git-based workflows.
• Ability to work independently, prioritize well, and figure things out without a playbook.
• Based in or able to commute to Littleton, CO, with in-office attendance on Tuesdays.

Nice to have:

• Experience supporting a SOC 2 or ISO 27001 audit, or using Vanta or a similar compliance platform.
• Familiarity with AWS security services such as GuardDuty, Security Hub, CloudTrail, and SCPs.
• Infrastructure as code experience (Terraform, CDK, or similar).
• Experience with SAST/DAST tools or GitHub Advanced Security.
• Relevant certifications (CKA, AWS Security Specialty, etc.).

Compensation & Posting Statement:

The expected base salary for this position is: $80,000 - $120,000 USD. Salary is based on a number of factors including market conditions, location and may vary depending on job-related skills and experience.
Benefits include fully company-paid medical for employees, a 401(k) with up to 4% company match, company-paid life and disability coverage, a $1,200 annual wellness benefit, flexible time off, paid holidays, a paid winter break, and a monthly internet stipend.

Diversity, Equity, Inclusion & Equal Employment Opportunity at Banyan: Banyan affirms that inequality is detrimental to our Global Teams, associates, our Operating Companies, and the communities we serve. As a collective, our goal is to impact lasting change through our actions. Together, we unite for equality and equity. Banyan is committed to equal employment opportunities regardless of any protected characteristic, including race, color, genetic information, creed, national origin, religion, sex, affectional or sexual orientation, gender identity or expression, lawful alien status, ancestry, age, marital status, or protected veteran status and will not discriminate against anyone on the basis of a disability. We support an inclusive workplace where associates excel based on personal merit, qualifications, experience, ability, and job performance.

Please Note: Banyan Software does not accept unsolicited resumes or applications submitted via email, LinkedIn, or other direct channels. All candidates must apply through our official Careers site to be considered for employment. Applications submitted outside of our applicant tracking system will not be reviewed.

Your safety and security are important to us. Thank you for staying vigilant.