Remote Cloud DevSecOps Engineer: Kubernetes + IAM

ECS; United States; Remote; USD 130,000 - 175,000; Full time

Job summary

Everforth ECS is seeking a Senior Cloud DevSecOps Engineer to join a remote team in the United States. The role focuses on building and securing cloud-native infrastructure, with Kubernetes, Keycloak federation to Okta, and end-to-end CI/CD pipelines.

You will drive automation, security, and reliability across production and non-production environments. The ideal candidate has 10+ years of relevant experience, strong IAM, DevSecOps, and IaC skills, and a security-first mindset.

Qualifications

• US Citizenship and ability to pass a Public Trust background check
• Bachelor's degree in a relevant field
• 10+ years of relevant work experience
• 6+ years of systems engineering, DevOps, and cloud infrastructure experience in enterprise Linux and cloud environments
• 4+ years of hands-on experience provisioning, operating, and troubleshooting containerized workloads in production Kubernetes clusters
• 3+ years of dedicated experience configuring and managing enterprise IAM systems, specifically Keycloak and Okta (OIDC, OAuth 2.0, SAML 2.0)
• Strong experience building and maintaining automated CI/CD pipelines with security scans and container image registries
• Proficiency in IaC and configuration management using Terraform, Helm charts, and Kubernetes YAML manifests
• Solid background in networking, DNS, TLS/SSL termination, reverse proxy routing, and cloud network access policies
• Strong scripting skills in Bash, Python, or Go for automated infrastructure management
• Proactive problem-solving capabilities with a security-first engineering mindset and clear technical communication skills

Responsibilities

• Architect, provision, configure, and maintain production-grade Kubernetes cluster environments hosting containerized front-end, backend, and identity services
• Deploy, configure, and administer a highly available Keycloak Identity Broker instance running in Kubernetes, federating authentication to enterprise Okta via SAML 2.0 and OIDC
• Configure identity brokering rules, realm roles, client scopes, and token exchange policies within Keycloak to power secure authentication for React and Spring Boot services
• Design, build, and maintain end-to-end CI/CD pipelines for automated image builds, vulnerability scanning, automated testing gates, and zero-downtime rolling deployments via Helm
• Implement robust platform security controls, including Kubernetes Ingress controllers (NGINX/Traefik), TLS certificate automation (cert-manager), network policies, and container image scanning (Trivy)
• Automate secrets management and configuration injection across environments using tools such as HashiCorp Vault, AWS Secrets Manager, or Kubernetes External Secrets Operator
• Provision, monitor, and maintain supporting backing infrastructure including managed PostgreSQL instances and secure Amazon S3 storage buckets
• Establish centralized logging, monitoring, and alerting frameworks (Prometheus, Grafana, Loki or EFK stack) to ensure high system observability and reliability

Skills

Cloud infrastructure

Kubernetes

DevSecOps

IAM (Keycloak/Okta)

CI/CD pipelines

Terraform/IaC

Scripting (Bash/Python/Go)

Security best practices

Education

Bachelor's degree in a relevant field

Tools

Kubernetes

Docker

Helm

Keycloak

Okta

Terraform

CI/CD tools (GitLab CI, GitHub Actions, Jenkins)

Trivy

AWS Secrets Manager

Vault

Prometheus/Grafana

Job description

Everforth ECS is seeking a Senior Cloud DevSecOps Engineer to join a remote team in the United States. The role focuses on building and securing cloud-native infrastructure, with Kubernetes, Keycloak federation to Okta, and end-to-end CI/CD pipelines.

You will drive automation, security, and reliability across production and non-production environments. The ideal candidate has 10+ years of relevant experience, strong IAM, DevSecOps, and IaC skills, and a security-first mindset.