Hybrid Cloud DevSecOps Engineer – Secure Automation

GR8 People, Inc.; Owings Mills (MD); Hybrid; USD 121,000 - 206,000; Full time

Benefits offered by this job

Hybrid work schedule

Annual bonus eligibility

Health and wellness benefits

Paid time off

Job summary

T. Rowe Price is seeking a Senior Cloud DevSecOps Engineer to advance our security-focused cloud platform. You will design secure, scalable solutions and promote secure development practices across engineering and product teams.

You will implement guardrails with Terraform, review IAM, and integrate security into CI/CD pipelines using GitLab, while mentoring teams on IaC and cloud identity management.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related technical discipline, or equivalent practical experience and 5+ years of progressive engineering and/or security experience.
• Extensive experience with AWS, including developing guardrails and detective controls.
• Expertise in Infrastructure as Code, especially Terraform: authoring reusable modules, implementing policy-as-code (OPA or Trivy), and supporting multi-account deployment patterns.
• Experience automating AWS guardrails, baseline configurations, identity bindings, and logging/monitoring controls for new accounts or teams.
• Strong knowledge of AWS IAM (roles, permission boundaries, SCPs, and RCPs).
• Experience developing GitLab CI/CD pipelines and automating guardrail checks and deployment controls.
• Solid software engineering skills in Python, Go, or Java for automation tooling.
• Ability to write secure, maintainable, and testable code.
• Demonstrated ability to quickly learn new technologies and stay up-to-date with industry trends.
• Familiarity with architecture and cybersecurity frameworks.
• Strong organizational skills, able to prioritize tasks across competing requirements and balance security risks with delivery timelines.
• Proven ability to work independently.

Responsibilities

• Lead the development and implementation of security engineering solutions, focusing on infrastructure automation, cloud governance, and secure onboarding experiences for new workloads and teams.
• Design, maintain, and enhance security guardrails using Terraform, including reusable modules, policy-as-code solutions, and related automation.
• Participate in code reviews, offering constructive feedback to promote secure coding and improve design quality.
• Develop automation tools and security guardrails utilized by engineering teams to streamline developer workflows and minimize manual tasks, including Java and Python-based automations, and GitLab automations with Infrastructure as Code (IaC) gates.
• Collaborate with cloud engineering and application teams to embed automated security controls into their workflows, simplifying operational tasks and reducing friction for developers.
• Mentor engineers across teams on IaC best practices, cloud identity management, and principles of least privilege, including conducting AWS IAM reviews and configuring resource policies.

Skills

Automation

Security Engineering

Cloud Governance

IaC Best Practices

Education

Bachelor’s degree in Computer Science or related field

Tools

Terraform

GitLab CI/CD

Python

Java

Go

AWS

Trivy

OPA

Job description

T. Rowe Price is seeking a Senior Cloud DevSecOps Engineer to advance our security-focused cloud platform. You will design secure, scalable solutions and promote secure development practices across engineering and product teams.

You will implement guardrails with Terraform, review IAM, and integrate security into CI/CD pipelines using GitLab, while mentoring teams on IaC and cloud identity management.