Senior DevSecOps Engineer: AWS Cloud Security & Compliance

Lever, Inc.; Boston (MA); On-site; USD 165,000 - 195,000; Full time

Benefits offered by this job

Employee Stock Option Plan

Health Insurance

401K Plan

Team outings

Job summary

Tagup is seeking a Senior DevSecOps Engineer to design, build, and support secure, scalable AI-enabled platforms in a defense context. You’ll work hands-on with cloud technologies and automation to keep systems resilient in demanding environments.

Join a mission-driven team delivering critical capabilities for national security, with opportunities to shape security posture across AWS, Kubernetes, and CI/CD pipelines through IaC and proactive risk management.

Qualifications

• 6+ years in infrastructure or security engineering roles.
• Proven experience with ATO approvals (IL5+ or higher).
• Strong knowledge of cloud infrastructure security, particularly AWS.
• Familiarity with compliance frameworks: SOC2, NIST, CMMC.
• Proficiency with networking, encryption, and modern security tools.

Responsibilities

• Architect and secure infrastructure across AWS, Kubernetes, and cloud-native systems.
• Own ATO processes and compliance frameworks (IL5+ or higher).
• Design infrastructure as code with Terraform and other modern tooling.
• Conduct vulnerability assessments, penetration tests, and incident response.
• Collaborate with our engineering team to embed security into the development lifecycle.
• Stay ahead of security trends and continuously improve defenses.

Skills

6+ years experience in infra/security

ATO approvals (IL5+)

AWS security expertise

SOC2/NIST/CMMC familiarity

Networking & encryption

Security tooling proficiency

Kubernetes knowledge

Tools

Terraform

Cloud security tooling

Job description

Tagup is seeking a Senior DevSecOps Engineer to design, build, and support secure, scalable AI-enabled platforms in a defense context. You’ll work hands-on with cloud technologies and automation to keep systems resilient in demanding environments.

Join a mission-driven team delivering critical capabilities for national security, with opportunities to shape security posture across AWS, Kubernetes, and CI/CD pipelines through IaC and proactive risk management.