Senior DevSecOps Engineer: Automated Cloud Security & CIS

Webhosting; United States; On-site; USD 130,000 - 145,000; Full time

Benefits offered by this job

Medical benefits

401(k) matching 100% up to 4%

Professional development reimbursement

Paid time off & holidays

Remote office setup allowance

Job summary

Vultr is seeking a DevSecOps Engineer to design, build, and secure automated infrastructure for our cloud platform. You will own security lifecycle of golden images, Kubernetes clusters, and configuration pipelines, embedding compliance and hardening at build time.

The ideal candidate has deep expertise in Linux security, container hardening, and policy-as-code, with a bias toward durable automation over manual remediation. This role supports a remote-friendly workflow across the United States.

Qualifications

• Deep expertise in Linux security, container hardening, and policy-as-code is required.
• Comfort building durable automated infrastructure with minimal manual remediation.
• Experience embedding security into CI/CD pipelines and build systems.

Responsibilities

• Design, build, and maintain automated golden image creation pipelines for Linux VM and container base images.
• Enforce CIS hardening standards at build time and validate compliance before promotion.
• Implement and manage automated Linux patching workflows.
• Build and maintain configuration management pipelines to enforce hardened baselines and detect drift.
• Integrate security scanning (vulnerability, secrets, SBOM, compliance) into CI/CD pipelines.
• Implement policy-as-code controls to prevent non-compliant workloads from reaching production.
• Own the golden image factory from upstream source validation through automated CIS benchmarking and image promotion gates.
• Manage secrets lifecycle and distribution, ensuring no secrets are baked into images.
• Respond to drift, vulnerability alerts, and patch gaps with durable automation fixes.
• Instrument telemetry pipelines to surface image drift and unpatched CVEs in near-real time.

Skills

Linux security

Container hardening

Policy as code

Automation & orchestration

CI/CD security integration

Tools

Configuration management

Vulnerability scanning tools

Job description

Vultr is seeking a DevSecOps Engineer to design, build, and secure automated infrastructure for our cloud platform. You will own security lifecycle of golden images, Kubernetes clusters, and configuration pipelines, embedding compliance and hardening at build time.

The ideal candidate has deep expertise in Linux security, container hardening, and policy-as-code, with a bias toward durable automation over manual remediation. This role supports a remote-friendly workflow across the United States.