Senior Cloud Security DevSecOps Engineer

Worky; New York (NY); Hybrid; USD 170,000 - 230,000; Full time

Benefits offered by this job

Medical premiums paid by the company

Hybrid work environment

13+ holidays

Job summary

Dalio Family Office is seeking a Senior DevSecOps Engineer to design, deploy, and secure scalable AWS and Azure environments with an emphasis on infrastructure as code and secure SDLC practices.

Reporting to the Cybersecurity Lead, you will implement automated security controls, hardened Kubernetes, and robust CI/CD pipelines, while enabling data protection and compliance across mission-critical workloads in a hybrid NYC-based setting.

Qualifications

• 7+ years in DevSecOps/Cloud Engineering delivering and securing production AWS and Azure environments.
• 3+ years operating enterprise-scale platforms with reliability engineering and incident response.

Responsibilities

• Embed security-by-design across the SDLC with automated controls and measurable security outcomes.
• Deliver a secure, compliant AWS/Azure cloud foundation with data protection and key management.
• Harden container and Kubernetes platforms with policy enforcement and runtime protections.
• Build and maintain secure CI/CD pipelines with SAST/SCA, IaC + container scanning, secret detection, and policy gates.
• Enforce software supply-chain security (SBOMs, signed images, provenance) and route telemetry into Defender for Cloud.
• Secure AWS/Azure workloads across identity, network, compute, and storage, including encryption and retention.

Skills

DevSecOps

Cloud security

IaC

CI/CD

Kubernetes security

Python scripting

Education

Bachelor’s Degree in Cybersecurity/CS/IT

Tools

Terraform

GitLab

Azure DevOps

Microsoft Defender for Cloud

Job description

Dalio Family Office is seeking a Senior DevSecOps Engineer to design, deploy, and secure scalable AWS and Azure environments with an emphasis on infrastructure as code and secure SDLC practices.

Reporting to the Cybersecurity Lead, you will implement automated security controls, hardened Kubernetes, and robust CI/CD pipelines, while enabling data protection and compliance across mission-critical workloads in a hybrid NYC-based setting.