Senior DevSecOps Engineer

Clearpath; Arlington (VA); On-site; USD 135,000 - 170,000; Full time

Benefits offered by this job

6% 401(k) match with immediate vesting

Flexible time off

Comprehensive health and dental plans

Wellness and mental health support

Job summary

Stand Together is seeking a senior Cloud/DevOps security-focused engineer to establish and enforce security standards across AWS, Azure, and GCP. You will design automated guardrails for vulnerability management, build secure CI/CD pipelines, and implement IaC solutions for repeatable deployments.

Ideal candidates bring 5+ years in cloud/DevOps with strong security, IAM, and container security knowledge, plus experience with Splunk/SIEM and automation tooling.

Qualifications

• 5+ years in Cloud/DevOps/Platform engineering with security and automation.
• AWS, Azure and GCP knowledge.
• IAM, network security, encryption and secrets management.
• Vulnerability scanning tools and compliance frameworks.
• Container security and supply chain security knowledge.
• Terraform, Ansible, CDK or similar IaC tooling.
• Threat detection, log aggregation, and incident response with Splunk/SIEM.
• Python or other high-level language for automation.
• CI/CD & Monitoring: Jenkins, GitHub Actions, CodePipeline; Prometheus, Grafana, ELK/EFK.

Responsibilities

• Establish and enforce cloud security standards, IAM policies, and network controls across AWS/Azure/GCP.
• Implement continuous compliance and security monitoring aligned to CIS/NIST/ISO.
• Design automated guardrails for vulnerability management and secrets handling.
• Architect and maintain CI/CD pipelines with secure testing and policy enforcement.
• Develop IaC using Terraform, CloudFormation, CDK, or Ansible for repeatable deployments.
• Build and maintain containerized environments with hardened images and runtime security controls.
• Collaborate with software, data, and business teams to embed security in design and deployment.
• Advise on cloud security strategy, incident response, and disaster recovery.
• Coach engineers on secure coding and DevSecOps practices.

Job description

How You Will Contribute

• Cloud & Infrastructure Security
• Establish and enforce cloud security standards, identity & access management (IAM) policies, and network security controls across AWS and Azure.
• Implement continuous compliance and security monitoring aligned to the AWS Well-Architected Framework and industry standards (CIS, NIST, ISO).
• Design automated guardrails for vulnerability management, patching, and secrets management.
• DevOps & Automation
• Architect and maintain CI/CD pipelines with built-in security testing (SAST/DAST), artifact signing, and policy enforcement.
• Develop Infrastructure-as-Code (IaC) using Terraform, CloudFormation, CDK, or Ansible to ensure repeatable, secure deployments.
• Build and maintain containerized environments (Docker, Kubernetes, ECS, Fargate) with hardened images and runtime security controls.
• Collaboration & Leadership
• Partner with software, data, and business teams to integrate security best practices into application design and deployment.
• Act as a trusted advisor on cloud security strategy, incident response, and disaster recovery.
• Coach engineers on secure coding, DevSecOps patterns, and operational excellence.
• Able to clearly communicate the value of new initiatives to secure cross-functional adoption
• Enthusiasm to contribute to Stand Together\'s vision and principled approach to solving problems, and a commitment to stewarding our culture, which champions values including transformation and innovation, entrepreneurialism, humility, and respect.

What You Will Bring

• Experience: 5+ years in Cloud/DevOps/Platform engineering with a strong focus on security and automation
• Cloud Expertise: Deep knowledge of AWS services (EC2, RDS, DynamoDB, Lambda, SQS/SNS, ECS/ECR, Security Hub, etc.) and equivelant technologies in Azure and GCP
• Security Knowledge:
• Strong understanding of IAM, network security, encryption (KMS), key rotation, and secrets management
• Experience with vulnerability scanning tools (e.g., Security Hub, Inspector, Aqua, Prisma, or similar) and compliance frameworks.
• Familiarity with container security and supply chain security practices.
• Automation & IaC: Proficiency with Terraform, Ansible, Cloud Development Kit (CDK), or similar
• Demonstrated proficiency in threat detection, log aggregation, and incident response using Splunk and alternative SIEM tools
• Programming & Scripting: Proficiency in Python or another high-level language for automation and custom tooling
• CI/CD & Monitoring: Experience with Jenkins, GitHub Actions, CodePipeline, or similar, plus observability tools (Prometheus, Grafana, ELK/EFK)
• OS & Networking: Strong Linux/Unix command-line skills and solid grasp of TCP/IP, DNS, VPNs, firewalls, and load balancing

Stand Out Candidates Will Bring

• AWS Certified Solutions Architect, Security Specialty, or DevOps Engineer – Professional
• Experience with Zero Trust principles, cloud-native application security, or serverless security
• Background in incident response or security operations

What We Offer

• Competitive benefits: Enjoy a 6% 401(k) match with immediate vesting, flexible time off, comprehensive health and dental plans, plus wellness and mental health support through Peloton and Talkspace.
• A meaningful career: Join a passionate community of over 1,300 employees dedicated to improving lives and driving innovative solutions to complex social challenges.
• Commitment to growth: Thrive in a non-hierarchical environment that empowers employees to discover, develop and apply their unique talents.
• Competitive compensation: Our approach rewards the value you create through competitive salaries and bonus opportunities, allowing you to share in the success you help drive.

Our Values

Our Values: Working for an organization within the Stand Together philanthropic community is different from many other places. The culture is deeply rooted in Principle Based Management® (PBM®), a framework guided by the principles that drive human progress, such as dignity, openness, and bottom-up empowerment. PBM® empowers employees to be entrepreneurial, to innovate, and to continually drive transformation.

We believe diversity fuels creativity, broadens knowledge, and helps drive success. That is why we’re proud to be an Equal Opportunity Employer and strive to treat all employees and applicants with honesty, dignity, and respect.

135000 - 170000 USD a year

For this role, the anticipated base salary range is $135,000–$170,000 per year. This role may also be eligible for additional bonus compensation designed to align total compensation with an employee’s overall contribution.

Our Principles-Based Management™ (PBM) compensation philosophy is grounded in an individualized approach that rewards the long-term value each person creates for the organization. Compensation decisions are informed by a variety of factors, including relevant experience, capabilities, demonstrated skills, role responsibilities, and expected contribution. Consistent with this approach, base salary may vary within or outside of the anticipated range based on these considerations.