DevSecOps Engineer: Secure Cloud & CI/CD Automation

Openkrill; United States; A distancia; USD 120.000 - 180.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Employer Paid Life & Health Insurance

Competitive Bonus Structure

Home Office Reimbursement

Technology Allowance

Certification Reimbursement

Loyalty Program

Personalized Career Coaching

Generous Paid Time Off

Office Closure December 25-January 1

Descripción de la vacante

A-LIGN is seeking a DevSecOps Engineer to implement and validate security controls across cloud infra, CI/CD pipelines, and production apps. You will translate security and compliance needs into practical engineering solutions and automate audit evidence workflows.

You will work under the Principal Security Engineer, leveraging Terraform, cloud IAM, and vulnerability management to support FedRAMP/NIST/SOC2 compliance and secure deployment processes.

Formación

• Bachelor's degree or equivalent experience in information systems, cybersecurity, CS, engineering, or related field.
• 4+ years in DevSecOps, security engineering, cloud engineering, or software engineering.
• Experience with Go, Python, TypeScript, or similar languages; strong cloud IAM and pipelines.

Responsabilidades

• Design, implement, and validate security controls across cloud, CI/CD, and production apps.
• Author and maintain IaC using Terraform across QA, staging, production environments.
• Deliver production code addressing security requirements (auth, SSO, authorization, TLS, remediation).
• Design and administer IAM solutions including OAuth 2.0, OpenID Connect, SAML; automate account lifecycle.
• Manage vulnerability remediation from triage to closure across SAST/DAST, SCA, and container scanning.
• Remediate penetration testing findings in code/infrastructure and provide evidence-based responses.
• Translate FedRAMP, NIST 800-53, SOC 2, ISO 27001 into controls and repeatable audit evidence.
• Maintain cryptographic compliance and TLS/DNS posture verification.
• Develop automation for security operations and audit evidence workflows.
• Maintain security architecture docs, deployment checklists, and data flow diagrams.
• Perform security impact analysis for production changes and risk assessments.
• Participate in threat modeling, SBOMs, software supply chain security, logging coverage.

Conocimientos

Security engineering

Go/Python/TypeScript

Cloud platforms (GCP/AWS/Azure)

Terraform / IaC

IAM & access management

Vulnerability management

Penetration testing remediation

FedRAMP/NIST 800-53/SOC 2/ISO27001

Automation / scripting (Python, shell)

AI tooling for workflows

Educación

Bachelor's degree in information systems / cybersecurity / CS / engineering

Herramientas

Terraform

GCP/AWS/Azure

CI/CD tooling

Descripción del empleo

A-LIGN is seeking a DevSecOps Engineer to implement and validate security controls across cloud infra, CI/CD pipelines, and production apps. You will translate security and compliance needs into practical engineering solutions and automate audit evidence workflows.

You will work under the Principal Security Engineer, leveraging Terraform, cloud IAM, and vulnerability management to support FedRAMP/NIST/SOC2 compliance and secure deployment processes.