Remote DevSecOps Engineer: Cloud Security & Automation

Embedded Shishya; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health and wellness benefits

Generous PTO and paid holidays

MyShare Employee Ownership Program

401K, up to a 4% match

Work with industry leaders

Job summary

Electric Power Engineers (EPE) is seeking a seasoned DevSecOps Engineer to bolster security across cloud platforms, pipelines, and production environments. The role emphasizes AWS security, Terraform modules, Kubernetes hardening, and automation to enable secure software delivery.

Partnering with software and SRE teams, you will implement secure-by-default patterns, drive threat modeling, and ensure measurable security controls across the lifecycle.

Qualifications

• 3+ years in DevSecOps or related field.
• Hands-on AWS security and architecture.
• Experience with IAM, VPC, EKS, and encryption.
• Proficient in automation and coding for security.

Responsibilities

• Design, implement, and maintain security controls across AWS environments.
• Build secure Terraform modules and policies; enforce least privilege and encryption.
• Integrate security checks into CI/CD pipelines (static analysis, scans, gating).
• Harden Kubernetes/EKS clusters; manage RBAC and network policies.
• Develop and enforce IAM patterns; automate remediation for excess permissions.
• Establish vulnerability management processes across cloud and container workloads.

Skills

DevSecOps

Cloud security

Python scripting

RBAC & IAM

CI/CD security

Tools

Terraform

Kubernetes

GitHub Actions

Jenkins

Argo CD

SAST/SCA

Job description

Electric Power Engineers (EPE) is seeking a seasoned DevSecOps Engineer to bolster security across cloud platforms, pipelines, and production environments. The role emphasizes AWS security, Terraform modules, Kubernetes hardening, and automation to enable secure software delivery.

Partnering with software and SRE teams, you will implement secure-by-default patterns, drive threat modeling, and ensure measurable security controls across the lifecycle.