Senior DevSecOps Engineer
PactFi
Get more replies from employers
Send a job-specific resume in minutes.
Benefits offered by this job
Job summary
PactFi is seeking a Senior DevSecOps Engineer to strengthen security, reliability, and operational maturity of our private asset-platform. This hands-on IC role focuses on securing production systems, automating deployments, and enabling engineering teams to ship safely and efficiently.
You will own infra-as-code, CI/CD, observability, IAM and secrets management, SOC 2 readiness, and 24/7 on-call operations, collaborating closely with engineering and security teams to improve resilience.
Qualifications
- 6+ years in DevOps, DevSecOps, SRE, or related roles.
- Strong hands-on AWS experience with IAM, networking, logging, and secure access patterns.
- Solid CI/CD pipeline development and release automation; container build/deploy workflows.
Responsibilities
- Design, build, and improve secure, scalable AWS infrastructure using IaC (Terraform, Pulumi).
- Build and maintain secure CI/CD pipelines for applications, infrastructure, and platform deployments.
- Support container-based build/deploy workflows and rolling updates/rollback strategies.
- Support Environment as a Service for engineering and QA teams and reduce deployment friction with strong security controls.
- Embed security controls into infrastructure, CI/CD, and cloud operations; SOC 2 readiness.
Skills
Education
Tools
Job description
Private asset markets (PE, Private Credit, VC, Real Estate) have 10x to 9.8T in AUM over the past decade and are projected to grow to $17T in the next five years. However, digital infrastructure has not kept pace, with most of the market operating predominantly in error-prone, internal-only software solutions.
PactFi provides secure, end-to-end, operational infrastructure for managing complex private credit transactions. Our web-based application brings together all parties involved in such a transaction to more efficiently allocate capital, complete KYC, share documents, manage funds flow, and more. The platform is secured to a bank-grade standard, and we have received our SOC 2 Type 2 attestation.
PactFi was developed in close partnership with two of the industry's largest players, both of whom represent the top 3 players in the private credit space by both size (AUM) and deal activity.
We're looking for a Senior DevSecOps Engineer to work closely with our Lead DevSecOps Engineer to improve the security, reliability, infrastructure, deployment, and operational maturity of our platform. This is a hands‑on individual contributor role for someone who enjoys building, automating, securing, and improving production systems — not managing a team.
You’ll strengthen our CI/CD workflows, AWS infrastructure, observability, SOC 2 readiness, business continuity, disaster recovery, and 24/7 on‑call operations. The ideal candidate is experienced, practical, and collaborative — comfortable owning technical workstreams and helping engineering teams ship safely and efficiently.
- Design, build, and improve secure, scalable AWS infrastructure using infrastructure-as-code (Terraform, Pulumi‑Python).
- Improve cloud networking, IAM, secrets management, environment isolation, and secure configuration.
- Standardize provisioning, access control, auditability, and change management.
- Troubleshoot infrastructure issues and drive long‑term fixes that reduce operational toil.
- Build, maintain, and improve secure CI/CD pipelines for application, infrastructure, and platform deployments.
- Support container‑based build and deployment workflows, including rolling updates and rollback strategies.
- Support Environment as a Service for the engineering and QA teams
- Reduce deployment friction while maintaining strong security and compliance controls.
- Embed security controls into infrastructure, CI/CD pipelines, and cloud operations.
- Support SOC 2 Type 2 readiness through control implementation, evidence collection, access reviews, and audit support.
- Manage secrets, IAM, least‑privilege access, and vulnerability management across containers, dependencies, and cloud services.
- Ensure sensitive data is protected across logs, pipelines, monitoring systems, backups, and AI‑assisted workflows.
- Contribute to secure usage patterns for AI/ML tools and services, including data handling, vendor risk, access controls, and model boundary considerations.
- Build and improve observability across logs, metrics, dashboards, and alerts; maintain centralized logging pipelines.
- Define and maintain SLOs, SLIs, alerting standards, and escalation paths.
- Participate in a 24/7 production on‑call rotation; support incident response, root‑cause analysis, and postmortems.
- Create and maintain runbooks, playbooks, and operational documentation.
- Design, document, and improve BC/DR plans; support RTO/RPO planning for critical systems.
- Implement and test backup, restore, replication, failover, and recovery procedures.
- Identify single points of failure and drive remediation across infrastructure, data stores, and operational processes.
- 6+ years in DevOps, DevSecOps, SRE, platform engineering, infrastructure, or security engineering.
- Strong hands‑on AWS experience, including IAM, networking, logging, monitoring, and secure access patterns.
- Solid CI/CD pipeline development and release automation experience; container build and deployment workflows.
- Infrastructure‑as‑code with Terraform and/or Pulumi (Python); strong scripting in Python, Bash, or similar.
- Strong Ubuntu/Linux command‑line experience.
- Strong networking fundamentals, including VPCs, DNS, TLS, routing, firewalls/security groups, load balancing, and private connectivity.
- Observability tooling: logs, metrics, dashboards, alerts, and operational visibility.
- Experience with secrets management, IAM, audit logging, vulnerability scanning, and secure configuration.
- Strong hands‑on experience with AI tools (e.g. Claude, ChatGPT) and AI‑assisted development workflows, including an understanding of related security and data‑handling risks.
- Experience participating in 24/7 on‑call operations and supporting high‑reliability production systems.
- Hands‑on experience supporting SOC 2 Type 2 and/or ISO 27001 frameworks.
- Experience implementing controls for access management, change management, incident response, logging, and data protection.
- Ability to translate compliance requirements into practical, repeatable technical controls.
- Experience in regulated or security‑sensitive environments (fintech, healthcare, enterprise SaaS) is a strong plus.
- Strong understanding of distributed systems, failure modes, and resilience; experience with SLOs/SLIs and incident management.
- Experience with backup, restore, failover, and disaster recovery procedures; familiarity with RTO/RPO planning.
- Strong communication skills; comfortable working closely with a technical lead while independently owning deliverables.
- Able to provide senior‑level technical judgment and practical recommendations across DevSecOps, infrastructure, and security decisions.
- Ownership mindset, strong documentation habits, and comfort operating in high‑accountability production environments.
- Jenkins, Docker, Kubernetes (including security, admission controls, and network policies).
- AWS ECS Fargate, CloudWatch, ELK stack, Bedrock, Redis, redshift, and AWS Systems Manager (SSM).
- Experience with SOC 2 Type 2 audit support and automated compliance evidence collection.
- Disaster recovery testing, tabletop exercises, and production failover planning.
- Fintech or other regulated industry background.
- Bachelor's degree in Computer Science
- Competitive salary + equity.
- Healthcare coverage.
- 401k
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
