Senior DevSecOps Engineer: Cloud & Kubernetes Security Lead

Sutherland; United States; Remote; USD 140,000 - 180,000; Full time

Job summary

Sutherland is seeking a seasoned DevSecOps Engineer to embed security across our cloud infrastructure and software delivery pipelines. You will secure GCP/AWS, Kubernetes clusters, CI/CD pipelines, and internal endpoints while preserving engineering velocity.

You will own shift-left security and partner with Platform, CloudOps, and application teams. The role requires 7+ years in DevSecOps, hands-on cloud security, IAM design, and compliance experience (SOC 2, HIPAA, ISO 27001).

Qualifications

• 7+ years in DevSecOps or infrastructure security.
• Experience securing Kubernetes clusters in production.
• Proven experience with cloud security services (GCP/AWS) and IAM design.
• Strong CI/CD security knowledge and integrated scanning.
• Experience reducing cloud attack surface and threat modelling.
• Clear communication and ability to write runbooks.

Responsibilities

• Own CSPM across GCP and AWS with remediation tracking.
• Design IAM policies and least-privilege access for multi-cloud workloads.
• Enforce VPC security controls, private endpoints, and audit surface areas.
• Secure external-facing services with internal load balancers and VPNs.
• Manage secrets with Secret Manager/AWS Secrets Manager; rotate credentials.
• Lead cloud security incident response across cloud and Kubernetes.
• Own SOC 2, HIPAA, ISO 27001 compliance evidence and gap analysis.
• Conduct threat modelling and architecture risk assessments.
• Harden GKE clusters with CIS benchmarks and pod security standards.
• Implement network policies for east-west segmentation.
• Operate runtime security tooling (Falco).
• Manage Kubernetes RBAC with least-privilege principles.
• Secure container supply chain with image scanning (Trivy/Snyk).
• Implement Istio security controls (mTLS, policies).
• Audit workloads for security drift and secrets in env vars.
• Secure GitLab CI/CD end-to-end; protect runners and MR approvals.
• Integrate SAST/DAST, dependency and container scanning.
• Enforce IaC security scanning as a gate for Terraform changes.
• Manage GitLab token hygiene and rotation policies.
• Define pipeline security policies as code.

Skills

DevSecOps

Cloud security

Kubernetes security

CI/CD security

Threat modelling

Communication skills

Tools

GCP

AWS

Kubernetes

GitLab

Terraform

Datadog

Istio

Falco

Job description

Sutherland is seeking a seasoned DevSecOps Engineer to embed security across our cloud infrastructure and software delivery pipelines. You will secure GCP/AWS, Kubernetes clusters, CI/CD pipelines, and internal endpoints while preserving engineering velocity.

You will own shift-left security and partner with Platform, CloudOps, and application teams. The role requires 7+ years in DevSecOps, hands-on cloud security, IAM design, and compliance experience (SOC 2, HIPAA, ISO 27001).