Senior DevSecOps Engineer - Secure Dev Platform (Remote in Aug)

FreshtechIT; New York (NY); On-site; USD 170,000 - 210,000; Full time

Benefits offered by this job

Competitive package

Benefits

Job summary

FreshtechIT is seeking a Senior DevSecOps Engineer for NYC, with onsite work and remote options for August. You will own security engineering across CI/CD, cloud, and platform tooling, partnering with engineering teams to bake security into development.

You’ll build automated vulnerability tooling, manage secrets and identity, and shape security for AI-enabled platforms, while advancing SSH/SCC controls and software supply-chain security.

Qualifications

• Solid hands-on engineering experience, including security-focused roles.
• Proven experience building security tooling/platforms adopted by engineering teams.
• Strong AWS security expertise — IAM, SCPs, KMS, workload identity and secrets management
• Deep CI/CD and software supply-chain security experience
• Strong Kubernetes/EKS security experience
• Hands-on programming experience with Python, Go, Bash or similar
• Strong Linux and distributed-systems experience
• Experience with Terraform and infrastructure automation
• A strong threat-modelling and adversarial mindset
• Experience with AI-assisted development tools such as Claude Code, GitHub Copilot or autonomous agents

Responsibilities

• Define and own security engineering strategy for internal developer platforms and shared infrastructure.
• Build automated vulnerability management and remediation tooling that engineering teams actually adopt.
• Own secrets, identity, authentication and workload identity tooling.
• Secure CI/CD across GitHub Actions, ArgoCD and related platforms.
• Implement software supply-chain security including SBOM, SLSA, cosign/sigstore, dependency and container scanning.
• Design AWS security governance covering SCPs, IAM, KMS, secrets and workload identity.
• Build secure-by-default Terraform modules and reusable platform patterns.
• Strengthen EKS/Kubernetes security, including admission control, network policies, image/runtime security and tenant isolation.
• Help shape security architecture for AI/ML platforms, including model access, agent security, data boundaries and AI supply chains.
• Use AI-assisted engineering tools to dramatically increase engineering productivity.
• Partner with InfoSec, AppSec and engineering teams to turn security requirements into practical engineering solutions.

Skills

Security tooling

AWS security

CI/CD security

Kubernetes security

Scripting (Python/Go)

Linux systems

Terraform

Threat modeling

AI-assisted development tools

Tools

GitHub Actions

ArgoCD

Terraform

cosign/sigstore

GitHub Copilot / Claude Code

Job description

FreshtechIT is seeking a Senior DevSecOps Engineer for NYC, with onsite work and remote options for August. You will own security engineering across CI/CD, cloud, and platform tooling, partnering with engineering teams to bake security into development.

You’ll build automated vulnerability tooling, manage secrets and identity, and shape security for AI-enabled platforms, while advancing SSH/SCC controls and software supply-chain security.