Senior SecOps SRE — Cloud Security & Automation

Cambridge Mobile Telematics; Massachusetts; Hybrid; USD 118,000 - 148,000; Full time

Benefits offered by this job

RSUs

Medical insurance

401k match

Unlimited PTO

Job summary

Cambridge Mobile Telematics (CMT) is seeking a Senior Site Reliability Engineer, SecOps in Cambridge, MA to advance security tooling in AWS, manage IAM, and own the telemetry pipeline. You will automate infrastructure with Terraform and CI/CD, participate in incidents, and work with product teams to enforce security standards.

The role requires 4+ years in SRE/IT, strong Python, Terraform, and AWS expertise, plus experience with security tooling and cloud native security practices.

Qualifications

• Bachelor's degree or equivalent years of experience and/or certification in a related field.
• 4+ years of experience working in Site Reliability Engineering or Information Technology.
• Write and review code to automate away problems within your team's domain.
• Intermediate to expert experience deploying and maintaining AWS services such as EC2, ECS, EKS, SQS, Lambda, Dynamo, RDS/Aurora, S3, and IAM.
• Intermediate to expert experience monitoring services and applications using tools such as CloudWatch Metrics, CloudWatch Logs, and Datadog, including defining and configuring alerts and SLO reports.
• Intermediate to expert experience implementing and maintaining security controls and tooling in AWS, such as IAM, KMS, Security Hub, GuardDuty, Inspector, and Config.
• Intermediate to expert coding skills in at least one programming language; we work primarily in Python.
• Intermediate to expert experience using AI coding agents (Claude Code) daily for Terraform and Python development, log and finding investigation, and remediation authoring - with the judgment to verify output and keep AI‑assisted changes under standard PR and approval controls.
• Intermediate to expert experience using Infrastructure as Code platforms and CI/CD pipelines, specifically Terraform, to manage AWS infrastructure and services.
• In-depth knowledge & experience with Linux operating systems (Amazon Linux, Ubuntu) on EC2 and Docker on ECS / EKS.
• Experience partnering with security or engineering teams to implement and operationalize security requirements.

Responsibilities

• Use independent judgment and discretion to implement security tooling and controls in AWS as defined by the Security Engineering team, including deployment, configuration, agent coverage, and ongoing tooling health
• Implement IAM Roles and Policies, account-level guardrails, and secrets management in AWS in line with Security Engineering standards
• Remediate vulnerability, cloud security posture, and compliance findings across the AWS estate, tracking work to the remediation SLAs defined by the Security Engineering team
• Own the security telemetry pipeline — org-wide CloudTrail, GuardDuty, Security Hub, AWS Config, VPC Flow Logs, and application/audit logs — including coverage validation, retention and immutability requirements, routing into Lacework and Datadog, and managing ingest/retention cost
• Implement and maintain preventive controls — SCPs/RCPs, permission boundaries, Config rules and conformance packs, IaC policy-as-code in CI, and secret scanning — including drift detection, auto-remediation, and a documented exception/waiver process with expiry
• Implement network and data protection controls: security group and egress baselines, VPC segmentation, KMS key lifecycle and rotation, encryption-at-rest/in-transit standards, certificate lifecycle, and public‑exposure prevention (S3 Block Public Access, IAM Access Analyzer external findings).
• Codify everything as infrastructure-as-code using Terraform and CI/CD pipelines, enabling updates through Pull Requests with approval workflows, while also automating maintenance tasks to reduce toil
• Provide secure‑by‑default Terraform modules and self‑service paved paths so product teams inherit controls; consult on design reviews and threat models; act as the translation layer between Security Engineering standards and platform/application reality, feeding back where standards are impractical.
• Participate in incident response for security events, contribute to blameless postmortems and systemic remediation, including participating in an on‑call rotation
• Complete any additional tasks as they arise

Skills

Python

Code automation

Automation scripting

CI/CD

Incident response

Education

Bachelor's degree or equivalent

Tools

Terraform

Claude Code

Datadog

CloudWatch

AWS

Docker

Job description

Cambridge Mobile Telematics (CMT) is seeking a Senior Site Reliability Engineer, SecOps in Cambridge, MA to advance security tooling in AWS, manage IAM, and own the telemetry pipeline. You will automate infrastructure with Terraform and CI/CD, participate in incidents, and work with product teams to enforce security standards.

The role requires 4+ years in SRE/IT, strong Python, Terraform, and AWS expertise, plus experience with security tooling and cloud native security practices.