Senior DevSecOps Engineer: Cloud Security & K8s Automation

Triwill Group; United States; Remote; USD 150,000 - 210,000; Full time

Job summary

Triwill Group is seeking a hands-on Senior DevSecOps Engineer to build secure, scalable cloud infrastructure, Kubernetes platforms, and CI/CD pipelines. You will collaborate with engineering and platform teams to embed secure-by-default practices into the software delivery lifecycle.

The role blends DevSecOps, cloud security, automation, and software supply-chain security, with a pragmatic focus on engineering excellence and operational reliability.

Qualifications

• 5+ years of hands-on experience in DevSecOps, DevOps, or cloud security.
• Experience securing AWS or Google Cloud with IAM, workload identity, networking, encryption, and logging.
• Deep Kubernetes expertise including managed services like EKS or GKE.
• Implementing automated security controls such as vulnerability scanning, SBOMs, policy-as-code, and container image scanning.

Responsibilities

• Integrate security into cloud infrastructure, Kubernetes platforms, CI/CD pipelines, and developer self-service workflows.
• Design and implement secure-by-default patterns for IAM, workload identity, secrets management, network security, IaC, application deployment, and workload protection.
• Assess the current security landscape, identify gaps and risks, and establish scalable security practices within DevOps and platform teams.
• Build automated, risk-based security guardrails across source control, container builds, infrastructure changes, and application deployments using policy-as-code.
• Strengthen Kubernetes, container, and software supply-chain security, including cluster configuration, workload isolation, ingress, admission controls, runtime protection, dependency management, SBOMs, artifact signing, and build provenance.
• Partner with engineering teams to identify, prioritize and remediate vulnerabilities and security misconfigurations across cloud, Kubernetes, and CI/CD environments.
• Support security incident response across infrastructure and delivery systems, including investigation, containment, recovery, and post-incident improvements.
• Translate security, regulatory, and audit requirements into practical and maintainable engineering controls.
• Create automation, documentation, runbooks, and security standards, while mentoring engineers on DevSecOps best practices.

Skills

DevSecOps

Cloud Security

Kubernetes

Terraform

CI/CD

Scripting

Security Automation

Vulnerability Scanning

Policy-as-Code

HIPAA/SOC2

Tools

AWS

Google Cloud

Amazon EKS

Terraform

Argo CD

Harness

Codefresh

Datadog

Job description

Triwill Group is seeking a hands-on Senior DevSecOps Engineer to build secure, scalable cloud infrastructure, Kubernetes platforms, and CI/CD pipelines. You will collaborate with engineering and platform teams to embed secure-by-default practices into the software delivery lifecycle.

The role blends DevSecOps, cloud security, automation, and software supply-chain security, with a pragmatic focus on engineering excellence and operational reliability.