Senior Cloud Security Engineer (DevSecOps)

Dalio Family Office; New York (NY); Hybrid; USD 170,000 - 230,000; Full time

Benefits offered by this job

Hybrid work environment

100% company paid medical premiums

Generous PTO

Gym reimbursement

Job summary

Dalio Family Office in New York is seeking a Senior DevSecOps Engineer to design, deploy, and secure scalable AWS and Azure environments. You will implement secure IaC, automated testing, and policy controls across the SDLC, embedding security-by-design in every pipeline.

The role emphasizes threat detection, centralized telemetry with Defender for Cloud, and governance of AKS/EKS, KMS, and Key Vault, while supporting AI/LLM platforms and secure supply chains.

Qualifications

• 7+ years of DevSecOps / Cloud Engineering experience.
• Hands-on delivering production AWS and Azure environments.
• Advanced IaC expertise with Terraform and CloudFormation/Bicep.
• Strong Kubernetes security experience with policy enforcement and runtime protections.
• Experience building secure CI/CD automation with SBOMs and artifact signing.

Responsibilities

• Embed security-by-design across the SDLC with automated controls and measurable security outcomes.
• Deliver a secure, compliant AWS/Azure cloud foundation with data protection and key management.
• Harden container and Kubernetes platforms with policy enforcement and runtime protections.
• Build and maintain secure CI/CD pipelines with SAST/SCA, IaC + container scanning, secret detection and policy gates.
• Enforce software supply-chain security and route telemetry into Defender for Cloud.
• Secure workloads across identity, network, compute, and storage; implement encryption and data protection.

Skills

DevSecOps

Cloud security

IaC

Terraform

Kubernetes security

CI/CD automation

Threat modelling

Education

Bachelor's Degree in Cybersecurity/CS/IT

Tools

GitLab

Azure DevOps

JFrog Artifactory

Defender for Cloud

Job description

Dalio Family Office in New York is seeking a Senior DevSecOps Engineer to design, deploy, and secure scalable AWS and Azure environments. You will implement secure IaC, automated testing, and policy controls across the SDLC, embedding security-by-design in every pipeline.

The role emphasizes threat detection, centralized telemetry with Defender for Cloud, and governance of AKS/EKS, KMS, and Key Vault, while supporting AI/LLM platforms and secure supply chains.