Lead Cloud DevSec Ops Engineer

Highbrow LLC; New York, Mount Laurel Township (NY, NJ); Hybrid; USD 130,000 - 160,000; Full time

Job summary

A technology solutions firm is seeking a Lead Cloud DevSec Ops Engineer based in the United States. The role requires extensive experience in automation, cloud security, and programming, particularly with Python and PowerShell. Responsibilities include ensuring compliance with security controls, integrating security tooling into deployment pipelines, and developing APIs for cloud orchestration. This is a long-term, W2 employment opportunity, with options for remote work and office presence in New York.

Qualifications

• 7+ years of automation and IT experience, including 2+ years in DevOps and cloud environments.
• Strong programming skills with API and Webhook development.
• Experience in serverless PaaS solutions and CI/CD pipelines.

Responsibilities

• Ensure all cloud solutions adhere to security and compliance controls.
• Implement and enhance cloud orchestration platform.
• Integrate security tooling into deployment pipelines.

Skills

Automation

DevOps

Cloud Security

Python

PowerShell

Rego

API Development

Terraform

GCP

Azure

Job description

Job Title: Lead Cloud DevSec Ops Engineer

Job ID: 2024-12687

Job Location: Mt Laurel, NJ or New York, NY or Toronto, ON or London, ON (2 days/week onsite)

Job Travel Location(s):

# Positions: 3

Employment Type: W2

Duration:Long term

# of Layers:0

Work Eligibility:All Work Authorizations are Permitted – No Visa Transfers

Key Technology:DevOps, Python, PowerShell, Rego, Azure, GCP

Job Responsibilities:

• Ensure that all cloud solutions follow internally defined security and compliance controls.
• Implement the enterprise cloud capability and enhance the cloud orchestration platform for automated provisioning, management and scalability of hosts, containers, applications, and cloud services (AquaSec, Wiz.io, Defender, Sentinel, Google Chronicle, Splunk, etc.)
• Develop APIs and Webhook for multi-directional integration of cloud orchestration platform with system management systems, DevOps Tools, and cloud platforms.
• Data transformation and reporting for security compliance KPI/ KRIs
• Integration of security tooling in enterprise deployment pipelines for developer feedback and runtime governance
• Integration of security reporting with SIEM and incorporation with Enterprise Monitoring procedures
• Participate in fast-paced DevOps Engineering teams within Scrum agile processes.

Skills and Experience Required:

Required:

• 7+ years of automation and IT experience. 2+ years in DevOps and cloud experience.
• Experience with Google Org Policy.
• Strong programming skill with experience in API and Webhook development using Python, PowerShell, and Rego.
• Experience with automating and integrating serverless PaaS solutions in Azure and GCP platforms.
• Deep knowledge of Container security and orchestration. Experience with compliance and application security tools.
• Understand Cloud (Azure/ GCP) security features (data protection, IAM, network security, compliance frameworks)
• Ability to troubleshoot Network, DNS, Firewall, and routing.
• Understand and develop concepts related to deploying services via CI/CD pipeline.
• Experience with creation of automated workflows using Terraform (Sentinel) and GitHub actions.