Senior DevSecOps Engineer: Cloud & Kubernetes Security

Sutherland; United States; Hybrid; USD 150,000 - 220,000; Full time

Job summary

Sutherland is seeking a Senior DevSecOps Engineer to embed security across cloud infrastructure and the software delivery pipeline. You will secure GCP/AWS, Kubernetes clusters, CI/CD pipelines, and internal endpoints while maintaining engineering velocity.

You will own shift-left security, orchestrate IAM and workload identity, and align with SOC 2, HIPAA, and ISO 27001 controls across multi-cloud environments.

Qualifications

• 7+ years in DevSecOps, cloud security, or infrastructure security engineering.
• Deep hands-on experience securing Kubernetes clusters in production.
• Proven experience with GCP and/or AWS security services and IAM design.
• Strong CI/CD security knowledge and integrated scanning.
• Experience reducing cloud attack surface and secret management.
• Familiarity with HIPAA, SOC 2, or ISO 27001 compliance.
• Clear communication and ability to write runbooks for engineers.

Responsibilities

• Secure cloud infrastructure (GCP/AWS) and IAM with least-privilege access.
• Harden Kubernetes clusters with CIS benchmarks and network policies.
• Integrate SAST/DAST, dependency and secret scanning in GitLab CI.
• Enforce IaC security scanning and policy as code for Terraform changes.
• Lead security incident response and threat modelling exercises.
• Own compliance evidence for SOC 2, HIPAA, and ISO 27001.

Skills

DevSecOps

Cloud security

Kubernetes security

CI/CD security

Compliance awareness

Threat modelling

Incident response

Tools

GCP

AWS

Kubernetes

GitLab

Terraform

Datadog

Istio

Job description

Sutherland is seeking a Senior DevSecOps Engineer to embed security across cloud infrastructure and the software delivery pipeline. You will secure GCP/AWS, Kubernetes clusters, CI/CD pipelines, and internal endpoints while maintaining engineering velocity.

You will own shift-left security, orchestrate IAM and workload identity, and align with SOC 2, HIPAA, and ISO 27001 controls across multi-cloud environments.