Remote DevSecOps Engineer: Cloud Security & IaC

Electric Power Engineers, LLC; Austin, Northern (TX, KY); Hybrid; USD 130,000 - 170,000; Full time

Benefits offered by this job

Health insurance

PTO and holidays

MyShare Employee Ownership Program

401K with company match

Job summary

Electric Power Engineers, LLC is hiring a DevSecOps Engineer to strengthen security across cloud platforms, pipelines, and production. The role emphasizes IAM, VPC, encryption, IaC security with Terraform, and secure CI/CD in a fast-moving grid-innovation environment.

The candidate will collaborate with software, SRE, platform, and security teams to implement secure-by-default patterns, automate controls, and reduce risk while enabling rapid software delivery.

Qualifications

• 3+ years of experience in DevSecOps, cloud security, DevOps, platform engineering, SRE, or related discipline.
• Strong hands-on experience securing AWS services and architectures (IAM, VPC, EC2, S3, RDS, EKS, Lambda, Route 53, KMS, GuardDuty, Security Hub).
• Advanced proficiency with Terraform, including secure reusable modules, state management, policy enforcement, code review.
• Strong understanding of Kubernetes/EKS security (RBAC, pod security, admission controls, secrets, network policies).
• Proficiency in Python, Bash, Go or similar for security automation and tooling.
• Experience integrating security controls into CI/CD pipelines (GitHub Actions/Jenkins/GitLab CI/Argo CD).
• Knowledge of SAST/SCA, container scanning, IaC scanning, secrets detection, CSPM, SIEM.

Responsibilities

• Design, implement, and maintain security controls across AWS environments (IAM, VPC, encryption, logging, governance).
• Build and maintain secure Terraform modules and policies enforcing least privilege and config standards.
• Integrate security checks into CI/CD pipelines and deployment gates.
• Harden EKS/Kubernetes workloads with RBAC, admission controls, and network policies.
• Develop and enforce least-privilege IAM patterns and automated remediation for excess permissions.
• Automate vulnerability management and evidence collection for audits.
• Create security automation in Python/Bash to detect misconfigurations and remediate findings.
• Enhance security monitoring with CloudTrail, GuardDuty, Security Hub, CloudWatch, and SIEM.

Skills

AWS security

Terraform

Kubernetes security

Automation

Python/Bash

CI/CD security

Linux & containers

Incident response

Compliance & controls

Communication

Tools

GitHub Actions

Jenkins

Argo CD

GuardDuty

CloudTrail

Security Hub

SIEM

Job description

Electric Power Engineers, LLC is hiring a DevSecOps Engineer to strengthen security across cloud platforms, pipelines, and production. The role emphasizes IAM, VPC, encryption, IaC security with Terraform, and secure CI/CD in a fast-moving grid-innovation environment.

The candidate will collaborate with software, SRE, platform, and security teams to implement secure-by-default patterns, automate controls, and reduce risk while enabling rapid software delivery.