DevSecOps Engineer - Electric Power Engineers

OpenTalent; Austin (TX); On-site; USD 110,000 - 170,000; Full time

Job summary

OpenTalent in Austin, TX is seeking an experienced DevSecOps Engineer to strengthen security of cloud platforms, software delivery pipelines, and production environments. The role combines deep AWS, Terraform, Kubernetes, and automation expertise with a security mindset to embed security across the lifecycle while automating controls and reducing risk.

You will partner with software engineering, Site Reliability Engineering, platform, security, compliance, and product teams to establish

Qualifications

• Minimum 3+ years in DevSecOps or security-focused cloud engineering.
• Hands-on with AWS, IaC (Terraform), and container security.
• Experience embedding security into CI/CD and production environments.

Responsibilities

• Design and maintain security controls across AWS environments.
• Implement secure Terraform modules and policies that enforce least privilege and encryption.
• Integrate security checks into CI/CD pipelines including static analysis and container scanning.
• Harden EKS and Kubernetes clusters with RBAC, admission controls, and runtime protections.
• Develop automated remediation for misconfigurations and security findings.
• Collaborate with software engineering, SRE, platform, security, and product teams to promote secure-by-default patterns.

Skills

AWS

Terraform

Kubernetes

Automation

Security engineering

IAM

CI/CD

SRE collaboration

Tools

Terraform

CloudTrail

GuardDuty

Security Hub

CloudWatch

SIEM

EKS

Job description

We are designing the grid of the future!

We are seeking an experienced DevSecOps Engineer to strengthen the security of our cloud platforms, software delivery pipelines, and production environments. The ideal candidate will combine deep AWS, Terraform, Kubernetes, and automation expertise with a strong security engineering mindset. This role will embed security throughout the software and infrastructure lifecycle, automate security controls, reduce cloud and application risk, and help engineering teams ship securely without creating unnecessary delivery friction.

The DevSecOps Engineer will partner closely with software engineering, Site Reliability Engineering, platform, security, compliance, and product teams to establish secure-by-default patterns, improve visibility into risk, and ensure that security controls are measurable, scalable, and operationally sustainable.

How you can make an impact :

• Cloud Security Engineering: Design, implement, and maintain security controls across AWS environments, including IAM, VPC networking, encryption, secrets management, logging, account governance, and service configuration.
• Infrastructure as Code Security: Build and maintain secure Terraform modules and policies that enforce approved infrastructure patterns, least privilege, encryption, logging, tagging, network controls, and configuration standards.
• Secure CI/CD: Integrate security checks into CI/CD pipelines, including static analysis, dependency scanning, container scanning, secrets detection, infrastructure-as-code scanning, policy validation, and deployment gates.
• Kubernetes & Container Security: Harden EKS and Kubernetes environments through secure workload configuration, RBAC, admission controls, image security, runtime protections, network policies, secrets management, and cluster lifecycle best practices.
• Identity & Access Management: Develop and enforce least-privilege IAM patterns, role-based access controls, service identities, access review processes, and automated remediation for excessive or unused permissions.
• Vulnerability Management: Establish processes and automation for identifying, prioritizing, tracking, and remediating vulnerabilities across cloud infrastructure, containers, dependencies, operating systems, and application platforms.
• Security Automation: Build Python, Bash, or other automation to detect misconfigurations, validate controls, collect evidence, remediate security findings, and reduce repetitive security operations work.
• Cloud Detection & Monitoring: Implement and improve security monitoring, logging, alerting, and detection capabilities using AWS-native and third-party tooling, including CloudTrail, GuardDuty, Security Hub, CloudWatch, SIEM platforms, or similar technologies.