DevSecOps Engineer

Igaminghunt; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Fully remote

Competitive salary

Paid annual leave

Sick leave

Career growth

Job summary

Igaminghunt is seeking a hands-on DevSecOps Engineer to own security across cloud infrastructure, CI/CD pipelines, and development processes for fintech and iGaming products. You will build secure, scalable systems and promote a security-first culture.

You will partner with DevOps to improve Kubernetes security, implement policy-as-code, and integrate SAST/DAST into CI/CD. This is a fully remote role with strong growth opportunities.

Qualifications

• Hands-on DevSecOps experience across cloud infrastructure and CI/CD.
• Experience with IaC and configuration management tools (Terraform, Ansible, Chef).
• Security testing, vulnerability remediation, and security automation a must.

Responsibilities

• Drive evolution of the DevSecOps function with security initiatives and priorities.
• Partner with DevOps to harden Kubernetes (EKS) and cloud-native infra.
• Embed security into service transitions and knowledge sharing.
• Develop policy-as-code frameworks and infrastructure validation (OPA).
• Improve provisioning/deployment security across Terraform and Ansible.
• Integrate security testing (SAST/DAST) into SDLC and CI/CD.
• Automate security monitoring, compliance checks, and controls.

Skills

DevSecOps principles

CI/CD pipeline design

Kubernetes security

Security automation practices

Networking concepts

Security testing & remediation

Git / version control

Cloud security (AWS/GCP)

SSDLC / OWASP SAMM

Security tooling in CI/CD

Tools

Terraform

Ansible

Chef

Vault

PAM solutions

OPA

Istio

Kubernetes (EKS)

Job description

We are looking for a hands-on DevSecOps Engineer to join a fast-growing software development company delivering fintech and iGaming products. In this role, you will take ownership of security across cloud infrastructure, CI/CD pipelines, and development processes, helping build secure and scalable products.

Responsibilities:

• Drive the evolution of the company’s DevSecOps function by defining security initiatives, long-term priorities, and promoting a security-first engineering mindset
• Partner with the DevOps team to improve the security and resilience of Kubernetes (EKS), Istio, Service Mesh, and related cloud-native infrastructure
• Support engineering teams during service transitions by embedding security best practices into operational processes and ensuring effective knowledge sharing
• Develop and maintain policy-as-code frameworks and infrastructure validation mechanisms using technologies such as OPA and other compliance automation tools
• Improve the security of infrastructure provisioning and deployment workflows across Terraform, Ansible, and other Infrastructure-as-Code solutions
• Integrate, maintain, and optimise security testing and scanning capabilities throughout the software development and release lifecycle
• Build automation around security monitoring, compliance checks, and operational controls to increase efficiency and reduce manual effort

Requirements:

• Strong practical understanding of modern DevOps principles and secure CI/CD pipeline design
• Hands-on experience with Kubernetes or other enterprise-grade container orchestration platforms
• Proven experience working with Infrastructure-as-Code and configuration management technologies such as Terraform, Ansible, Chef, or equivalent tools
• Solid background in administering production infrastructure, including web servers, databases, and supporting services
• Good understanding of networking concepts, including TCP/IP, routing principles, and the OSI model
• Experience securing distributed systems and microservices-based architectures
• Proficiency with Git or other source code version control platforms
• Practical experience securing cloud environments, preferably AWS, though experience with GCP or other major cloud providers is also valuable
• Ability to assess infrastructure security posture, identify vulnerabilities, and implement appropriate remediation measures
• Experience implementing identity and access management controls together with security automation practices
• Hands‑on knowledge of secrets management platforms (such as Vault) and Privileged Access Management (PAM) solutions
• Experience integrating SAST, DAST, dependency scanning, container scanning, or similar security tooling into CI/CD workflows
• Good understanding of Secure Software Development Lifecycle (SSDLC) principles and familiarity with security maturity frameworks such as OWASP SAMM v2
• English level: Upper-intermediate or higher

What’s in it for you:

• Fully remote working format
• Competitive salary based on experience
• Paid annual leave and sick leave
• Opportunities for professional and career growth
• Supportive environment focused on continuous development and long-term growth