Staff Cloud DevSecOps Engineer

Stryker; Orlando (FL); On-site; USD 103,000 - 222,000; Full time

Benefits offered by this job

Health benefits

401(k) plan

Employee stock purchase plan (ESPP)

Job summary

Stryker is seeking a Cloud DevSecOps Engineer to keep a multi-cloud platform fast and reliable across AWS and GCP workloads. You will own the monitoring stack, automate incident response, and drive performance and cost optimization while collaborating with engineering, product, and compliance teams.

You will design secure foundations, implement policy-as-code, and maintain observability stacks using Prometheus/Grafana, CloudWatch, Stackdriver, and Datadog.

Qualifications

• Bachelor’s degree in Computer Science, Engineering, or related field.
• 4+ years of cloud operations, SRE, or DevOps experience.
• Hands-on with at least one major cloud provider (AWS, GCP, or Azure).
• Proficiency in scripting or programming (Python, PowerShell, Bash).
• Experience deploying and supporting monitoring/alerting platforms.

Responsibilities

• Own the monitoring stack and incident response automation.
• Design secure cloud foundations, IAM, secret management, and Terraform modules.
• Implement cloud security guardrails and policy-as-code.
• Design and maintain observability stacks (Prometheus/Grafana, CloudWatch, Datadog).
• Build CI/CD pipelines and infrastructure-as-code (Terraform, CloudFormation, Pulumi).
• Automate incident response with runbooks and auto-remediation scripts.
• Ensure SOC 2 / ISO 27001 controls in logging, alerts, and backups.
• Document evidence for audits (access reviews, vulnerability scans).
• Participate in weekly on-call rotation and blameless retrospectives.

Skills

Scripting proficiency

Monitoring platforms

Security controls

CI/CD pipelines

Infrastructure as code

Incident response

Observability

Education

Bachelor’s degree in CS/Engineering

Tools

Prometheus

Grafana

CloudWatch

Stackdriver

Datadog

Terraform

CloudFormation

Pulumi

Job description

What You Will Do:

The Cloud DevSecOps Engineer is responsible for keeping our multi-cloud platform fast, reliable, and transparent. This position will own the monitoring stack, automate incident response, and drive performance and cost optimization across production AWS/GCP workloads. Acting as the bridge between engineering, product, and compliance teams, the Cloud Operations and Observability Engineer will surface actionable insights and ensure compliance with relevant SOC 2 controls.

• Design and maintain secure cloud foundations and shared platform services, including landing zones, IAM/service accounts, workload identity/OIDC, secrets management, network/security controls, and reusable Terraform modules.
• Partner with DevOps and application teams to enable secure golden-pipeline deployments, troubleshoot infrastructure blockers, and ensure cloud services are provisioned through standardized, repeatable patterns.
• Implement and maintain cloud security guardrails and policy-as-code, including controls such as Cloud Armor/WAF, least-privilege IAM, secrets rotation, vulnerability remediation, and infrastructure configuration standards.
• Design, deploy, and maintain observability stacks (Prometheus/Grafana, CloudWatch, Stackdriver, Datadog, or similar)
• Build and manage CI/CD pipelines and infrastructure-as-code (Terraform, CloudFormation, Pulumi)
• Automate incident response with runbooks, chat-ops, and auto-remediation scripts (e.g., Lambda, Cloud Functions)
• Ensure logging, alerting, and backup configurations meet SOC 2 / ISO 27001 controls
• Document evidence for audit requests (access reviews, vulnerability scans, disaster-recovery drills)
• Participate in weekly on-call rotation (pager duty) and drive blameless incident retrospectives

What You Will Do:

The Cloud DevSecOps Engineer is responsible for keeping our multi-cloud platform fast, reliable, and transparent. This position will own the monitoring stack, automate incident response, and drive performance and cost optimization across production AWS/GCP workloads. Acting as the bridge between engineering, product, and compliance teams, the Cloud Operations and Observability Engineer will surface actionable insights and ensure compliance with relevant SOC 2 controls.

• Design and maintain secure cloud foundations and shared platform services, including landing zones, IAM/service accounts, workload identity/OIDC, secrets management, network/security controls, and reusable Terraform modules.
• Partner with DevOps and application teams to enable secure golden-pipeline deployments, troubleshoot infrastructure blockers, and ensure cloud services are provisioned through standardized, repeatable patterns.
• Implement and maintain cloud security guardrails and policy-as-code, including controls such as Cloud Armor/WAF, least-privilege IAM, secrets rotation, vulnerability remediation, and infrastructure configuration standards.
• Design, deploy, and maintain observability stacks (Prometheus/Grafana, CloudWatch, Stackdriver, Datadog, or similar)
• Build and manage CI/CD pipelines and infrastructure-as-code (Terraform, CloudFormation, Pulumi)
• Automate incident response with runbooks, chat-ops, and auto-remediation scripts (e.g., Lambda, Cloud Functions)
• Ensure logging, alerting, and backup configurations meet SOC 2 / ISO 27001 controls
• Document evidence for audit requests (access reviews, vulnerability scans, disaster-recovery drills)
• Participate in weekly on-call rotation (pager duty) and drive blameless incident retrospectives

What You Will Need:

Required Qualifications:

• Bachelor’s degree in Computer Science, Engineering, or related field
• 4+ years professional experience in cloud operations, SRE, or DevOps roles
• Hands-on experience with at least one major cloud provider (AWS, GCP, or Azure)
• Proficiency in scripting or programming (Python, PowerShell, Bash, or similar)
• Experience deploying and supporting monitoring/alerting platforms (Prometheus, Datadog, Grafana, New Relic, etc.)

Preferred Qualifications:

• Experience with enterprise IAM, workload identity/OIDC, secrets management, cloud security controls, and Terraform-based landing-zone/platform engineering.
• Certifications: AWS SysOps Administrator, Google Cloud DevOps Engineer, or Azure Administrator Associate
• Familiarity with Kubernetes, service mesh, and distributed tracing (Jaeger, OpenTelemetry)

United States of America Pay Ranges:

• USN: $102,600 - $171,000 USD Annual
• US5: $107,700 - $179,600 USD Annual
• US10: $112,900 - $188,100 USD Annual
• US15: $118,000 - $196,600 USD Annual
• US20: $123,100 - $205,200 USD Annual
• US30: $133,400 - $222,300 USD Annual

View the U.S. work location and transparency guide to find the pay range for your location.

Health benefits include: Medical and prescription drug insurance, dental insurance, vision insurance, critical illness insurance, accident insurance, hospital indemnity insurance, personalized healthcare support, wellbeing program and tobacco cessation program. Financial benefits include: Health Savings Account (HSA), Flexible Spending Accounts (FSAs), 401(k) plan, Employee Stock Purchase Plan (ESPP), basic life and AD&D insurance, and short-term disability insurance. Stryker offers innovative products and services in MedSurg, Neurotechnology, Orthopaedics and Spine that help improve patient and healthcare outcomes. Alongside its customers around the world, Stryker impacts more than 150 million patients annually. Depending on customer requirements employees and new hires in sales and field roles that require access to customer accounts as a function of the job may be required to obtain various vaccinations as an essential function of their role.