DevSecOps Engineer

Tari Labs, LLC.; United States; On-site; USD 135,000 - 220,000; Full time

Job summary

Tari Labs, LLC. is seeking a DevSecOps Engineer to secure, harden, and scale our cloud infrastructure across AWS and Kubernetes in production environments. You will collaborate with platform, infrastructure, and security teams to improve security maturity, support audits, and ensure reliable, compliant operations.

The role demands hands-on expertise and practical, execution-focused mindset. This position requires working across Linux and Windows environments, IAM, and CI/CD controls to protect

Qualifications

• 5+ years in DevOps/DevSecOps or security engineering.
• Strong AWS experience in production.
• Production Kubernetes experience.
• Terraform and IaC experience.
• Secure configuration standards experience.
• Compliance/audit evidence gathering and control validation.
• Vulnerability remediation and patching.
• Linux and Windows VM management.
• IAM, secrets management, network security, logging and monitoring.
• CI/CD security improvements in pipelines.
• Excellent troubleshooting and communication skills.
• Must live/work in the U.S.

Responsibilities

• Secure and improve production infrastructure, harden cloud/host configurations, and build repeatable operational practices across environments.
• Design, implement, and maintain secure, scalable infrastructure in AWS.
• Manage, secure, and improve Kubernetes-based environments, including production workloads.
• Build and maintain infrastructure as code using Terraform.
• Harden production systems across cloud, compute, container, identity, and network layers.
• Develop and maintain secure baseline configurations for infrastructure and platform services.
• Support vulnerability management, patching, remediation, and configuration compliance.
• Configure, administer, and patch Linux and Windows VMs; IAM and privileged access controls.
• Contribute to CI/CD pipelines security and deployment workflows.
• Participate in incident response and post-incident analysis.
• Develop documentation, runbooks, standards, and playbooks.
• Monitor and troubleshoot complex infrastructure and security issues.

Skills

AWS

Kubernetes

Terraform

Linux

Windows VM

CI/CD

IAM

Vulnerability management

Networking security

Scripting (Python/Bash/PS)

Compliance knowledge

Communication

Cloud security

Tools

Ansible

PowerShell

Active Directory

EKS

Job description

Overview

We are seeking a DevSecOps Engineer to join our Engineering team. This role is critical to securing, hardening, and scaling the infrastructure that powers our platform across cloud-hosted production environments.

This engineer will work closely with platform, infrastructure, and security stakeholders to improve the security and operational maturity of our AWS and Kubernetes environments, support compliance and audit readiness, and help ensure our systems are reliable, secure, and maintainable as we grow. This role will also support environments serving regulated and security-sensitive customer needs, including an environment we host for a Government organization.

The ideal candidate combines strong hands-on infrastructure expertise with sound security judgment and a practical, execution-focused mindset. They should be comfortable working across cloud infrastructure, Kubernetes, operating systems, compliance controls, and production operations.

Core Responsibilities

Responsibilities include collaborating with the platform and engineering teams to secure and improve production infrastructure, harden cloud and host configurations, and build repeatable operational practices across environments. Key responsibilities include:

• Design, implement, and maintain secure, scalable infrastructure in AWS
• Manage, secure, and improve Kubernetes-based environments, including production workloads
• Build and maintain infrastructure as code using Terraform
• Harden production systems across cloud, compute, container, identity, and network layers
• Develop and maintain secure baseline configurations for infrastructure and platform services
• Support vulnerability management, patching, remediation, and configuration compliance efforts across environments
• Configure, administer, and patch both Linux and Windows VMs
• Support identity and access management practices, including least privilege, role design, and privileged access controls
• Contribute to administration and integration of Active Directory domains where needed
• Partner with engineering teams to improve security within CI/CD pipelines, deployment workflows, and operational processes
• Support compliance initiatives, audits, evidence collection, and technical control validation
• Develop and maintain documentation, operational runbooks, technical standards, and playbooks
• Monitor, troubleshoot, and resolve complex infrastructure and security issues with clear and timely communication
• Participate in incident response and post-incident analysis when infrastructure or platform issues arise
• Stay current on cloud, infrastructure, and security best practices that can improve platform resilience and delivery

Required Qualifications

• Minimum of 5 years of experience in DevOps, DevSecOps, Infrastructure Engineering, Platform Engineering, or Security Engineering
• Strong hands-on experience with AWS in production environments
• Proven experience with Kubernetes, preferably in production
• Strong experience with Terraform and infrastructure-as-code practices
• Experience hardening production environments and implementing secure configuration standards
• Experience supporting compliance frameworks, audit preparation, evidence gathering, and control validation
• Experience with vulnerability remediation, system patching, and operational security practices
• Experience configuring and maintaining both Linux and Windows virtual machines
• Strong understanding of IAM, secrets management, network security, logging, monitoring, and operational controls
• Proven experience improving or securing CI/CD pipelines and deployment workflows
• Excellent troubleshooting and problem-solving skills in complex production environments
• Strong communication skills with the ability to explain technical concepts to both technical and non-technical stakeholders
• Must live/work in the U.S.

Preferred Qualifications

• Experience supporting environments with regulated, compliance-driven, or security-sensitive requirements
• Familiarity with compliance or security frameworks such as SOC 2, NIST, ISO 27001, CMMC, or similar
• Experience with EKS or other managed Kubernetes platforms
• Experience configuring or supporting Active Directory Domain Services, Group Policy, or hybrid identity environments
• Experience with automation and configuration management tools such as Ansible, PowerShell, or similar
• Experience with PostgreSQL, cloud storage platforms, and production networking patterns
• Scripting experience in Python, Bash, or PowerShell
• Experience with security tooling related to container security, vulnerability management, or policy enforcement
• Experience supporting customer-facing or mission-critical production infrastructure
• Security+ Certification
• Top Secret Security Clearance

$135,000 - $220,000 a year

The anticipated compensation range for this position may vary based on experience, skills, qualifications, location, and business needs. In addition to base salary, this role may be eligible for bonuses, equity, and a comprehensive benefits package.