Senior DevSecOps Architect – AI Security & Cloud Controls

Jobs in JS; Cameron Park (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Stellarus in California seeks a seasoned Product Security Engineer to design, build, and operate security-as-code across applications, data, cloud, and infrastructure. You will help secure AI-enabled systems and scale security engineering with automation and developer-native platforms.

You will report to the Senior Director, Product Security, and help lead governance, threat modeling, and secure-by-default outcomes. This role emphasizes hands-on engineering and collaboration across teams.

Qualifications

• Requires a college degree or equivalent experience.
• Requires at least 10 years of relevant experience.
• 8+ years in DevSecOps, Security Engineering, or Software Engineering preferred.
• Strong experience building security capabilities into CI/CD pipelines.
• Hands-on experience with Infrastructure-as-Code tools such as Terraform.
• Proficiency in Python, Go, or TypeScript.
• Deep understanding of application security, cloud security, and distributed systems.
• Experience securing Kubernetes or cloud-native environments.
• Strong IAM, encryption, and network security principles.
• Experience with policy-as-code tools such as OPA or Kyverno.
• Experience with AI/ML systems or applying AI to security problems preferred.
• Experience in regulated environments such as healthcare preferred.

Responsibilities

• Design and operate security controls embedded in CI/CD pipelines using policy-as-code and automation-first approaches.
• Build and maintain developer-native security platforms covering SAST, SCA, API validation, and IaC security.
• Implement data protection controls to detect and prevent exposure of PHI, PII, and secrets.
• Develop secure application and API patterns including authentication, authorization, and encryption standards.
• Engineer reusable libraries for encryption, tokenization, and data redaction.
• Define and enforce cloud and infrastructure security using Infrastructure-as-Code and GitOps workflows.
• Build identity, access, encryption, and network guardrails using automated controls.
• Implement software supply chain security including SBOM generation, artifact signing, and provenance validation.
• Develop detection-as-code and automated response capabilities to reduce reliance on manual security operations.
• Design and enforce controls to secure AI systems and prevent misuse, data leakage, and model risk.
• Leverage AI to improve detection, analysis, and automation across security operations.
• Translate regulatory requirements into enforceable technical controls and automated evidence generation.
• Eliminate manual security processes in favor of scalable engineering-driven solutions.

Job description

Stellarus in California seeks a seasoned Product Security Engineer to design, build, and operate security-as-code across applications, data, cloud, and infrastructure. You will help secure AI-enabled systems and scale security engineering with automation and developer-native platforms.

You will report to the Senior Director, Product Security, and help lead governance, threat modeling, and secure-by-default outcomes. This role emphasizes hands-on engineering and collaboration across teams.