DevSecOps Engineer

LionHires Recruitment; Town of Poland (NY); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Health insurance

Sports package

20 vacation days

Paid sick leave

Language course support

Premium office facility

Job summary

LionHires Recruitment partners with a tech client to hire a DevSecOps Engineer for an on-site role in New York. The candidate will drive security roadmaps, automate pipelines, and embed a robust security culture within the engineering ecosystem.

Collaboration with DevOps teams to secure Kubernetes (EKS), Istio, and Service Mesh configurations is essential. The role emphasizes mentoring on security, implementing OPA, securing IaC with Terraform/Ansible, and integrating continuous security

Qualifications

• Strong DevOps background with cloud security architecture.
• Experience securing Kubernetes, Istio, and service mesh environments.
• Proficient in IaC tools Terraform/Ansible/Chef and security automation.

Responsibilities

• Define security roadmaps and DevSecOps culture across the org.
• Architect secure Kubernetes (EKS) environments and service mesh configurations.
• Mentor teams on secure architectural practices and SSDLC principles.
• Deploy and configure OPA and security analyzers in pipelines.
• Harden CI/CD pipelines and IaC (Terraform/Ansible).
• Integrate automated security scans into deployment pipelines.
• Automate complex security processes and compliance checks.

Skills

DevOps

Cloud security

CI/CD pipelines

Security auditing

IAM / secrets management

SSDLC

Networking fundamentals

Tools

Kubernetes

Istio

Terraform

Ansible

Chef

HashiCorp Vault

Job description

Ready to shape the security posture of high-scale cloud environments from the ground up? We are seeking a talented DevSecOps Engineer to drive our security roadmap, automate pipelines, and embed a robust security culture directly within our engineering ecosystem. This is a fully on-site opportunity designed for a technical professional who thrives on real-time collaboration, immediate impact, and working side-by-side with world-class engineering teams.

About the Client

Our partner is a tech company building product engineering across Fintech, iGaming, and Marketing. They turn innovative ideas into high-performing engines and launch them at scale. As their exclusive recruitment partner, we manage their full-cycle talent acquisition.

What You Will Do

• Drive and define the strategic direction, security roadmaps, and DevSecOps culture across the entire organization.
• Collaborate closely with DevOps teams to architect secure Kubernetes (EKS) environments, Istio setups, and Service Mesh configurations.
• Champion security principles by mentoring, training, and seamlessly transferring secure architectural services to DevOps support teams.
• Deploy and configure Open Policy Agent (OPA) alongside advanced virtualization configuration security analyzers.
• Harden and optimize CI/CD pipeline security, ensuring infrastructure-as-code (IaC) frameworks like Terraform and Ansible are thoroughly secured.
• Integrate and automate continuous security scanning tools directly into the deployment pipelines.
• Eliminate manual overhead by writing automation workflows for complex security processes and compliance checks.

What You Bring

• Core DevOps & Cloud Expertise: Strong foundation in DevOps methodologies, CI/CD pipelines, and cloud security architectures (AWS or GCP).
• Orchestration & IaC: Hands-on experience with Kubernetes, service mesh technologies, and configuration management tools (such as Terraform, Ansible, or Chef).
• Security & Infrastructure Auditing: Proven experience analyzing cloud infrastructure for information security risks and executing mitigation strategies.
• Identity & Access Management: Deep knowledge of automating access controls and implementing secrets management tools (like HashiCorp Vault or privileged user control systems).
• Secure SDLC: A strong understanding of secure software development lifecycle (SSDLC) principles, ideally using frameworks like OWASP SAMMv2.
• Technical Fundamentals: Proficient with version control systems (Git), web server and database administration, the TCP/IP protocol stack, and the OSI model.

What's in It for You

• Career Acceleration: Limitless growth opportunities within a fast-paced, dynamic international tech environment.
• Health & Wellness: Comprehensive medical insurance coverage for you and your partner, complemented by a dedicated sports package to maintain a healthy lifestyle.
• Work-Life Balance: 20 working days of paid annual vacation plus fully paid sick leave.
• Continuous Learning: Language course support with partial financial compensation to elevate your skills.
• Premium Office Perks: Access to a modern, top-tier office facility in a prime location, fully stocked with daily snacks and refreshments.
• Life Milestones: Special company gifts to celebrate your major life events (birthdays, weddings, and newborns).
• Vibrant Culture: Memorable team-building activities, local corporate events, and exclusive international company parties.