Senior DevSecOps Engineer — Secure Cloud & CI/CD, Equity

PactFi; New York (NY); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Competitive salary + equity

Healthcare coverage

401k

Job summary

PactFi is seeking a Senior DevSecOps Engineer to strengthen security, reliability, and operational maturity of our private asset-platform. This hands-on IC role focuses on securing production systems, automating deployments, and enabling engineering teams to ship safely and efficiently.

You will own infra-as-code, CI/CD, observability, IAM and secrets management, SOC 2 readiness, and 24/7 on-call operations, collaborating closely with engineering and security teams to improve resilience.

Qualifications

• 6+ years in DevOps, DevSecOps, SRE, or related roles.
• Strong hands-on AWS experience with IAM, networking, logging, and secure access patterns.
• Solid CI/CD pipeline development and release automation; container build/deploy workflows.

Responsibilities

• Design, build, and improve secure, scalable AWS infrastructure using IaC (Terraform, Pulumi).
• Build and maintain secure CI/CD pipelines for applications, infrastructure, and platform deployments.
• Support container-based build/deploy workflows and rolling updates/rollback strategies.
• Support Environment as a Service for engineering and QA teams and reduce deployment friction with strong security controls.
• Embed security controls into infrastructure, CI/CD, and cloud operations; SOC 2 readiness.

Skills

AWS

CI/CD

Terraform

Pulumi

Python

Ubuntu/Linux

Networking

Observability

AI security

On-call

Docker

Kubernetes

Education

Bachelor's degree in Computer Science

Tools

Terraform

Pulumi

Python

Docker

Kubernetes

AWS

Job description

PactFi is seeking a Senior DevSecOps Engineer to strengthen security, reliability, and operational maturity of our private asset-platform. This hands-on IC role focuses on securing production systems, automating deployments, and enabling engineering teams to ship safely and efficiently.

You will own infra-as-code, CI/CD, observability, IAM and secrets management, SOC 2 readiness, and 24/7 on-call operations, collaborating closely with engineering and security teams to improve resilience.