Senior DevSecOps Engineer

STEPS Talent; New York (NY); Hybrid; USD 140,000 - 190,000; Full time

Job summary

STEPS Talent is partnering with a global investment management organization to hire a Senior DevSecOps Engineer. This hands-on role focuses on building and operating security capabilities directly within CI/CD pipelines.

You will design, implement, and continuously improve security controls integrated into developer workflows, using Python and AWS, Kubernetes, and IaC tools in a hybrid, 3 days onsite / 2 days remote model.

Qualifications

• Hands-on DevSecOps experience with security embedded in CI/CD pipelines.
• Strong Python and AWS automation skills.
• Experience with Kubernetes/EKS, Terraform, and Ansible.
• Familiarity with GitHub Actions, ArgoCD, Jenkins, or GitLab CI.
• Developer-first approach and ability to lead engineers and contractors.

Responsibilities

• Build, secure, and operate security capabilities within CI/CD pipelines.
• Set technical standards and direct engineers and contractors while staying hands-on.
• Collaborate with development teams to integrate security controls into workflows.

Skills

Python

AWS

DevSecOps

Kubernetes

IaC

Terraform

Ansible

GitHub Actions

ArgoCD

Jenkins

GitLab CI

Security in CI/CD

Technical leadership

Tools

Kubernetes/EKS

Terraform

Ansible

GitHub Actions

ArgoCD

Jenkins

GitLab CI

Job description

Location: New York, NY / Irvine, CA / Charlotte, NC

Work Model: Hybrid — 3 days onsite / 2 days remote

Employment: Full-Time

We’re hiring a Senior DevSecOps Engineer for a global investment management organization. This is a hands-on engineering role focused on building and operating security capabilities directly within CI/CD pipelines.

This is not a traditional DevOps, SRE, Cloud Infrastructure, or Security Operations role. You will remain hands-on while owning technical direction and helping drive engineer and contractor delivery.

What We’re Looking For

• Python + AWS: Personally build, automate, and secure solutions in AWS using Python.
• End-to-End DevSecOps: Design, implement, operate, and continuously improve security capabilities embedded in CI/CD.
• CI/CD Security: Security scanning, vulnerability remediation, secrets controls, policy enforcement, and security gates.
• Kubernetes & IaC: Strong experience with Kubernetes/EKS, Terraform, and Ansible.
• CI/CD Platforms: Experience with GitHub Actions, ArgoCD, Jenkins, GitLab CI, or equivalent.
• Developer-First Security: Build security controls that integrate effectively into developer workflows.
• Technical Leadership: Set technical standards and direct engineers and contractors while remaining hands‑on.