Senior DevOps Engineer

PAR Technology; Town of Texas (WI); On-site; USD 136,000 - 175,000; Full time

Job summary

PAR Technology Corporation seeks a hands-on Senior DevOps Engineer to embed security across the software lifecycle. You will design secure CI/CD pipelines, automate cloud infrastructure, and strengthen the security and reliability of engineering systems.

Remote work options include several US states; collaborate with product teams to raise security standards while delivering fast, scalable software for a global restaurant/retail base.

Qualifications

• 6-12 years of experience across DevOps, platform engineering, security engineering, or a related field with 3+ years in DevSecOps or cloud security.
• Hands-on with CI/CD platforms (GitHub Actions, GitLab CI, Jenkins, Azure DevOps) including embedded security tooling.
• Strong AWS/Azure cloud engineering experience (IAM, networking, encryption, logging, monitoring).
• Production experience with Kubernetes and containers, securing clusters and workloads at scale.
• Proficiency with Terraform or CloudFormation and at least one scripting language (Python, Go, Bash).
• Solid networking fundamentals and security concepts (DNS, TLS, firewalls, NACLs, tcpdump, Wireshark).
• Experience with observability platforms (Prometheus, Grafana, ELK/OpenSearch, Datadog).
• Knowledge of application security (OWASP Top 10, SCA, supply-chain risk, secure SDLC).
• Experience with Snyk/Trivy/SonarQube or similar tools.
• Clear communication and ability to influence without authority.

Responsibilities

• Design, build, and operate secure CI/CD pipelines with integrated SAST/DAST/SCA and secrets scanning.
• Harden and automate AWS/Azure infrastructure using IaC with policy enforcement (OPA/Sentinel).
• Own container/orchestration security across Docker/Kubernetes with provenance and runtime protections.
• Implement and tune cloud security posture management and threat detection; drive remediation with engineering teams.
• Build secure secrets management and least-privilege access patterns; manage service mesh MTLS.
• Lead threat modeling and secure design reviews early in development lifecycles.
• Respond to security events and conduct post-incident analysis to improve detections.
• Design and manage cloud networking (VPC/VNet, subnets, routing, private endpoints).
• Operate edge security (WAF, TLS, CDN, DDoS protection) and TLS lifecycle automation.
• Drive capacity planning, autoscaling, and cloud cost optimization without compromising security.

Skills

DevSecOps

CI/CD

AWS

Azure

Kubernetes

Terraform

Python

Security architecture

Networking

SAST/DAST/SCA

OPA/Sentinel

Education

BS in Computer Science or related field

Tools

GitHub Actions

GitLab CI

Jenkins

Azure DevOps

Argo CD

Flux

Kustomize

Prometheus

Grafana

ELK/OpenSearch

Datadog

Snyk

Trivy

SonarQube

Job description

For over four decades, PAR Technology Corporation (NYSE: PAR) has been a leader in restaurant technology, empowering brands worldwide to create lasting connections with their guests. Our innovative solutions and commitment to excellence provide comprehensive software and hardware that enable seamless experiences and drive growth for over 100,000 restaurants in more than 110 countries. Embracing our "Better Together" ethos, we offer Unified Customer Experience solutions, combining point-of-sale, digital ordering, loyalty and back-office software solutions as well as industry-leading hardware and drive-thru offerings. To learn more, visit partech.com or connect with us on LinkedIn, X (formerly Twitter), Facebook, and Instagram.

Position Description

PAR Technology is seeking a hands-on Senior DevOps Engineer to embed security into every stage of how we build, ship, and operate software. Sitting at the intersection of platform engineering and security, this role owns the tooling, automation, and guardrails that enable product teams to move quickly without compromising the trust of the restaurant and retail brands that rely on PAR. You will design secure CI/CD pipelines and cloud infrastructure, identify and remediate risk before it reaches production, and help raise the security and reliability bar across the engineering organization.

Position Location:

Remote - New York, Texas, Philadelphia, Florida, North Carolina, Minnesota, Colorado, Georgia, Illinois

Reports To

Director, DevOps

What We're Looking For

• 6-12 years of experience across DevOps, platform engineering, security engineering, or a related field, including at least 3 years focused on DevSecOps or application/cloud security in production environments.
• Deep hands-on experience with CI/CD platforms such as GitHub Actions, GitLab CI, Jenkins, or Azure DevOps, including embedding security tooling into delivery pipelines.
• Strong cloud engineering experience with AWS and/or Azure, including IAM, networking, encryption, logging, and monitoring services.
• Production experience with Kubernetes and containers, including securing clusters and workloads at scale.
• Proficiency with infrastructure-as-code tools such as Terraform or CloudFormation and at least one scripting or programming language such as Python, Go, or Bash.
• Solid networking fundamentals, including TCP/IP, DNS, HTTP/HTTPS, TLS, routing, firewalls, security groups/NACLs, segmentation, and troubleshooting tools such as tcpdump, dig, and Wireshark.
• Hands‑on cloud networking experience with VPC/VNet design, load balancing, ingress controllers, private connectivity, service mesh technologies, and zero‑trust network patterns.
• Experience operating observability platforms such as Prometheus, Grafana, ELK/OpenSearch, or Datadog and using telemetry to improve reliability and security outcomes.
• Working knowledge of application security, including the OWASP Top 10, dependency and software supply-chain risk, secrets hygiene, and secure SDLC practices.
• Experience with security scanning and monitoring tools such as Snyk, Trivy, SonarQube, Wiz, Prisma Cloud, Falco, or equivalent platforms.
• Clear, pragmatic communication skills with the ability to explain risk and trade‑offs to engineers and leaders and influence without direct authority.

Additional Skills

• Security certifications such as CISSP, CKS, OSCP, AWS Certified Security - Specialty, Azure security certifications, or GIAC; networking certifications such as CCNA or AWS Certified Advanced Networking - Specialty.
• Experience with multi‑region, highly available architectures, disaster recovery, and chaos engineering practices.
• Experience in payments, fintech, retail, or another PCI DSS-regulated environment.
• Exposure to zero‑trust architectures, SIEM/SOAR platforms, or internal security platforms and paved‑road tooling.
• Contributions to open‑source security tooling or active participation in the security community.

Unleash your potential: What you will be doing and owning:

• Design, build, and operate secure CI/CD pipelines with integrated SAST, DAST, SCA, secrets scanning, and container image scanning, making the secure path the easy path for product teams.
• Harden and automate AWS and/or Azure infrastructure using infrastructure-as-code, with security policies enforced through OPA, Sentinel, or native policy engines.
• Own container and orchestration security across Docker and Kubernetes, including image provenance, runtime protection, network policies, and admission controls.
• Implement and tune cloud security posture management, vulnerability management, and threat detection capabilities, and partner with engineering teams to drive findings through remediation.
• Build and maintain secure secrets management, identity, workload identity, service mesh mTLS, and least‑privilege access patterns.
• Lead threat modeling and secure design reviews for new services and architectures, partnering with product engineering early in the development lifecycle.
• Respond to security events and lead post‑incident analysis, improving detection, alerting, and runbooks after each incident.
• Design and manage cloud networking, including VPC/VNet architecture, subnetting, routing, NAT, peering, transit gateways, private endpoints, and hybrid connectivity.
• Operate edge and traffic‑layer security, including load balancers, API gateways, WAF, DDoS protection, CDN configuration, DNS management, and TLS certificate lifecycle/PKI automation.
• Implement GitOps‑based delivery using Argo CD or Flux with Helm/Kustomize and progressive delivery patterns such as blue‑green and canary releases with automated rollback.
• Build and operate observability capabilities across metrics, logging, tracing, and alerting, with defined SLOs and actionable, low‑noise alerts.
• Manage artifact repositories and software supply‑chain controls, including image registries, SBOM generation, artifact signing, and provenance using technologies such as Sigstore/Cosign and SLSA.
• Drive capacity planning, autoscaling, and cloud cost optimization across compute, storage, and network layers without compromising security.
• Champion compliance‑relevant engineering controls, including PCI DSS and SOC 2, and automate evidence collection wherever possible.
• Mentor engineers on secure coding and operational security practices, acting as a force multiplier rather than a gatekeeper.

Interview Process

• Interview #1: Video Screen with Talent Acquisition Team
• Interview #2: Video interview with the Hiring Manager (via MS Teams)
• Interview #3: Video interview with the Team (via MS Teams)

PAR is proud to provide equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. We also provide reasonable accommodations to individuals with disabilities in accordance with applicable laws. If you require reasonable accommodation to complete a job application, pre‑employment testing, a job interview or to otherwise participate in the hiring process, or for your role at PAR, please contact [e-mail]. If you’d like more information about your EEO rights as an applicant, please visit the US Department of Labor's website.

Compensation Range: $135.5K - $175K