Secure Cloud Deployment & DevSecOps Engineer

Nominal; Los Angeles (CA); On-site; USD 208,000 - 245,000; Full time

Benefits offered by this job

Medical coverage

Dental & Vision

Unlimited PTO

Free lunch

Dev stipend

Hardware stipend

Annual retreat

Parental leave

Wellness stipend

Hardware sensor stipend

401(k)

Equity

Job summary

Nominal is seeking a Cloud, Deployments & DevSecOps Engineer to secure our platform across AWS, GovCloud, and customer-hosted environments. You will own security controls, detection, and evidence for deployments, coordinating with engineering to embed guardrails and automation.

The role requires deep AWS security expertise paired with hands-on cloud engineering, Kubernetes security, and experience implementing identity, access, and network controls.

Qualifications

• Deep AWS security experience with hands-on cloud engineering.
• Strong Kubernetes experience including securing clusters and workloads.
• Experience implementing cloud identity, access and network security controls.
• Experience building or operating cloud logging, monitoring and threat detection.
• Experience with infrastructure as code and security automation.
• Experience working directly with engineering teams to implement and maintain production security controls.

Responsibilities

• Design and implement security controls across AWS, GovCloud, customer-hosted clouds and on-premises deployments.
• Develop secure cloud architecture, including landing zones, service control policies and security boundaries.
• Harden Kubernetes and EKS environments, including workload identity, network policies and runtime security.
• Build centralized logging, monitoring, dashboards and detection capabilities across deployments.
• Develop cloud detection and response workflows, triage cloud security findings and support incident response and recovery.
• Implement infrastructure-as-code guardrails, policy-as-code, drift detection and continuous compliance automation.
• Improve deployment pipeline security through artifact signing, admission policies and software supply chain controls.
• Develop container and base-image security standards, including images that meet applicable FIPS requirements.
• Partner with engineering to obtain and integrate available security telemetry from customer environments.
• Support FedRAMP and other federal deployment requirements through technical controls and evidence.

Skills

AWS security

Kubernetes

Cloud security controls

Logging & threat detection

Infrastructure as code

Engineering collaboration

Tools

Azure

GCP

Self-hosted deployments

Job description

Nominal is seeking a Cloud, Deployments & DevSecOps Engineer to secure our platform across AWS, GovCloud, and customer-hosted environments. You will own security controls, detection, and evidence for deployments, coordinating with engineering to embed guardrails and automation.

The role requires deep AWS security expertise paired with hands-on cloud engineering, Kubernetes security, and experience implementing identity, access, and network controls.