Senior DevSecOps Engineer: Secure Cloud & CI/CD Mastery

Smartsheet; United States; On-site; USD 140,000 - 190,000; Full time

Job summary

Smartsheet is seeking a Senior DevSecOps Engineer to advance security, reliability, and automation across our production environment. You will design secure, scalable infrastructure on AWS, implement automated threat detection and incident response, and harden CI/CD pipelines with integrated security tooling.

You will mentor peers, lead blameless post-mortems, and help drive compliance across FedRAMP, SOC 2, and ISO 27001 while collaborating with product and security teams.

Qualifications

• 8+ years in technology, with senior-level SRE/DevOps or security engineering experience.
• Strong expertise in AWS and Infrastructure as Code (IaC) with Terraform.
• Experience securing CI/CD pipelines and integrating security tooling into development workflows.

Responsibilities

• Engineer secure and resilient infrastructure in a multi-cloud environment (primarily AWS) using IaC and best practices.
• Automate threat detection, incident response, and vulnerability management to enable fast, machine-speed remediation.
• Secure the Software Development Lifecycle by integrating SAST, DAST, and SCA into CI/CD pipelines.
• Lead incident response activities, drive blameless post-mortems, and implement preventive solutions.
• Drive automated compliance with FedRAMP, SOC 2, and ISO 27001; mentor engineers on security ownership.

Skills

Site Reliability Engineering

DevOps

Security Engineering

AWS

Terraform

Kubernetes

Python

Go

Ruby

CI/CD

Education

BS or MS in Computer Science or Engineering

Tools

Terraform

Kubernetes

Python

Go

Ruby

CI/CD tooling

Job description

Smartsheet is seeking a Senior DevSecOps Engineer to advance security, reliability, and automation across our production environment. You will design secure, scalable infrastructure on AWS, implement automated threat detection and incident response, and harden CI/CD pipelines with integrated security tooling.

You will mentor peers, lead blameless post-mortems, and help drive compliance across FedRAMP, SOC 2, and ISO 27001 while collaborating with product and security teams.