Senior DevSecOps Engineer

FreshtechIT; New York (NY); On-site; USD 170,000 - 210,000; Full time

Benefits offered by this job

Competitive package

Benefits

Job summary

FreshtechIT is seeking a Senior DevSecOps Engineer for NYC, with onsite work and remote options for August. You will own security engineering across CI/CD, cloud, and platform tooling, partnering with engineering teams to bake security into development.

You’ll build automated vulnerability tooling, manage secrets and identity, and shape security for AI-enabled platforms, while advancing SSH/SCC controls and software supply-chain security.

Qualifications

• Solid hands-on engineering experience, including security-focused roles.
• Proven experience building security tooling/platforms adopted by engineering teams.
• Strong AWS security expertise — IAM, SCPs, KMS, workload identity and secrets management
• Deep CI/CD and software supply-chain security experience
• Strong Kubernetes/EKS security experience
• Hands-on programming experience with Python, Go, Bash or similar
• Strong Linux and distributed-systems experience
• Experience with Terraform and infrastructure automation
• A strong threat-modelling and adversarial mindset
• Experience with AI-assisted development tools such as Claude Code, GitHub Copilot or autonomous agents

Responsibilities

• Define and own security engineering strategy for internal developer platforms and shared infrastructure.
• Build automated vulnerability management and remediation tooling that engineering teams actually adopt.
• Own secrets, identity, authentication and workload identity tooling.
• Secure CI/CD across GitHub Actions, ArgoCD and related platforms.
• Implement software supply-chain security including SBOM, SLSA, cosign/sigstore, dependency and container scanning.
• Design AWS security governance covering SCPs, IAM, KMS, secrets and workload identity.
• Build secure-by-default Terraform modules and reusable platform patterns.
• Strengthen EKS/Kubernetes security, including admission control, network policies, image/runtime security and tenant isolation.
• Help shape security architecture for AI/ML platforms, including model access, agent security, data boundaries and AI supply chains.
• Use AI-assisted engineering tools to dramatically increase engineering productivity.
• Partner with InfoSec, AppSec and engineering teams to turn security requirements into practical engineering solutions.

Skills

Security tooling

AWS security

CI/CD security

Kubernetes security

Scripting (Python/Go)

Linux systems

Terraform

Threat modeling

AI-assisted development tools

Tools

GitHub Actions

ArgoCD

Terraform

cosign/sigstore

GitHub Copilot / Claude Code

Job description

Senior DevSecOps Engineer - NYC ( onsite/ remote all of August)

We’re looking for a Senior DevSecOps Engineer to join a high-performing engineering organisation within a leading financial services environment.

This is a hands‑on, high‑ownership IC role for someone who enjoys building security into engineering platforms rather than simply identifying security findings.

You’ll take ownership of security engineering across CI/CD, AWS, Kubernetes, identity and authentication, software supply chain security, and an emerging AI platform.

As the Senior DevSecOps you will be responsible for:

• Define and own security engineering strategy for internal developer platforms and shared infrastructure
• Build automated vulnerability management and remediation tooling that engineering teams actually adopt
• Own secrets, identity, authentication and workload identity tooling
• Secure CI/CD across GitHub Actions, ArgoCD and related platforms
• Implement software supply-chain security including SBOM, SLSA, cosign/sigstore, dependency and container scanning
• Design AWS security governance covering SCPs, IAM, KMS, secrets and workload identity
• Build secure-by-default Terraform modules and reusable platform patterns
• Strengthen EKS/Kubernetes security, including admission control, network policies, image/runtime security and tenant isolation
• Help shape security architecture for AI/ML platforms, including model access, agent security, data boundaries and AI supply chains
• Use AI-assisted engineering tools to dramatically increase engineering productivity
• Partner with InfoSec, AppSec and engineering teams to turn security requirements into practical engineering solutions

As the DevSecOps you will have the following experience:

• Solid hands‑on engineering experience, including security-focused roles
• Proven experience building security tooling/platforms adopted by engineering teams
• Strong AWS security expertise — IAM, SCPs, KMS, workload identity and secrets management
• Deep CI/CD and software supply-chain security experience
• Strong Kubernetes/EKS security experience
• Hands‑on programming experience with Python, Go, Bash or similar
• Strong Linux and distributed-systems experience
• Experience with Terraform and infrastructure automation
• A strong threat‑modelling and adversarial mindset
• Experience with AI-assisted development tools such as Claude Code, GitHub Copilot or autonomous agents

We are offering a competitive package+ benefits .

The roles are onsite ( remote all of August)