Senior Cloud Security Engineer - DevSecOps & IaC

Iterable, Inc.; Boston (MA); On-site; USD 141,000 - 194,000; Full time

Job summary

Iterable, Inc. is seeking a Security Engineer to advance our cloud security posture across our product and infrastructure. You will review designs, drive security-driven architecture, and implement automated testing and policy enforcement.

You will work with Terraform, AWS services, and CI/CD pipelines, promoting security by design and DevSecOps practices. This role requires 5+ years in security-focused roles and strong Kubernetes experience.

Qualifications

• 5+ years hands-on keyboard in Cloud Security, SRE, DevOps, DevSecOps, or Infra Engineering.
• Strong working knowledge of Kubernetes and ecosystem tools such as helm, ArgoCD.
• Production experience with AWS services, particularly AWS Organizations, AWS Identity (SSO), IAM, SCPs, VPCs, ELB, CloudTrail, and Security Groups.
• Proficiency with Terraform.
• Experience developing custom actions or workflows in Github or Gitlab.
• Solid understanding of cloud security vulnerabilities defense techniques and security best practices, including AWS security practices.
• Proficiency in a high level programming language, such as Python or Go
• Familiarity with policy management tools such as OPA or Kyverno

Responsibilities

• Review system designs and implementations, and consult with engineers to identify and remediate security issues.
• Propose solutions and drive architectural improvements addressing security vulnerabilities.
• Develop and implement cloud and infrastructure security architecture and roadmaps.
• Participate in automated security testing tools deployment and management (SCPs, image scanners).
• Implement IaC scanning and policy enforcement to ensure secure deployments via Terraform, CloudFormation, etc.

Skills

Cloud Security

Kubernetes

Terraform

Github/Gitlab workflows

Python or Go

Policy management (OPA/Kyverno)

Tools

Terraform

Job description

Iterable, Inc. is seeking a Security Engineer to advance our cloud security posture across our product and infrastructure. You will review designs, drive security-driven architecture, and implement automated testing and policy enforcement.

You will work with Terraform, AWS services, and CI/CD pipelines, promoting security by design and DevSecOps practices. This role requires 5+ years in security-focused roles and strong Kubernetes experience.