Staff Engineer –DevSecOps (9809)

Extreme Networks; United States; Remote; USD 110,000 - 130,000; Full time

Job summary

A global networking leader is seeking a highly experienced Staff Engineer – DevSecOps to manage enterprise security and drive compliance initiatives. This role is crucial for implementing security controls aligned with ISO 27001, SOC 2, and NIST standards. The ideal candidate will have over five years of experience in security engineering, strong cloud-native skills, and the ability to lead technical initiatives across teams. The position offers a salary range of $110,000 - $130,000 annually.

Qualifications

• Five or more years of experience in information security or compliance engineering roles.
• Practical experience with DevOps security practices, including integrating security controls into CI/CD pipelines.
• Strong understanding and hands-on experience with ISO 27001, SOC 2, and NIST SP 800-53.

Responsibilities

• Implement and maintain security controls aligned with ISO 27001, SOC 2, and NIST 800-53.
• Collaborate with security leadership to ensure compliance adherence.
• Develop and maintain automated security and compliance monitoring tools.

Skills

DevOps security practices

Kubernetes security

Technical documentation

Cross-functional leadership

Cloud-native environments

Tools

Terraform

Helm

Ansible

GitHub Actions

Jenkins

GitLab CI

Job description

Over 50,000 customers globally trust our end-to-end, cloud-driven networking solutions. They rely on our top-rated services and support to accelerate their digital transformation efforts and deliver unprecedented progress. With double-digit growth year over year, no provider is better positioned to deliver scalable outcomes than Extreme.

Inclusion is one of our core values and in our DNA. We are committed to fostering an inclusive workplace that embraces our differences and creates an atmosphere where all our employees thrive because of their differences, not in spite of them.

Become part of Something big with Extreme! As a global networking leader, learn why there’s no better time to join the Extreme team.

Overview

We are seeking a highly experienced Staff Engineer – DevSecOps to lead and support our enterprise security, compliance, and risk management initiatives. This individual will play a key role in designing, implementing, and maintaining controls aligned with global compliance frameworks including ISO 27001, SOC 2, and NIST 800-53. The ideal candidate has a deep understanding of security engineering principles, a strong compliance mindset, and a proven track record in driving cross-functional security programs.

Key Responsibilities

• Follow established processes for the implementation and maintenance of security controls aligned with ISO 27001, SOC 2, and NIST 800-53.
• Collaborate with security leadership to ensure adherence to ISO 27001, SOC 2 and NIST 800-53 controls and procedures.
• Collaborate with internal and external auditors to support audits, evidence gathering, and remediation efforts.
• Develop and maintain automated security and compliance monitoring tools and dashboards.
• Translate regulatory requirements into technical requirements and integrate them into the SDLC (Secure Development Lifecycle).
• Execute tasks related to the implementation and upkeep of compliance controls under ISO 27001, SOC 2, and NIST 800-53 guidance.
• Conduct gap assessments and risk analysis; define and track remediation efforts to ensure compliance readiness.
• Strong hands-on experience and understanding of Kubernetes security, including RBAC, pod security policies, network policies, and secrets management.

Required Qualifications

• Five or more years of experience in information security or compliance engineering roles.
• Practical experience with DevOps security practices, including integrating security controls into CI/CD pipelines (GitLab CI, Jenkins, GitHub Actions, etc.).
• Strong understanding and hands-on experience with ISO 27001, SOC 2 (Type I and II), and NIST SP 800-53.
• Experience working in cloud-native environments (AWS, Azure, or GCP) with secure configuration and governance controls.
• Familiarity with cloud-native security (AWS, GCP, or Azure), container orchestration, and infrastructure-as-code tools like Terraform, Helm, or Ansible.
• Solid knowledge of access management, encryption, logging/monitoring, and network security principles.
• Demonstrated ability to lead technical initiatives, work cross-functionally, and influence at all levels.
• Excellent written and verbal communication skills with experience writing policies and technical documentation.

Preferred Qualifications

• Professional certifications such as CISSP, CISA, CISM, ISO 27001 Lead Implementer/Auditor, or AWS Security Specialty, etc.
• Experience with compliance automation platforms.
• Background in regulated industries such as fintech, healthcare, or government.

Salary: $110,000 - $130,000 a year

Extreme Networks, Inc. (EXTR) creates effortless networking experiences that enable all of us to advance. We push the boundaries of technology leveraging the powers of machine learning, artificial intelligence, analytics, and automation. Over 50,000 customers globally trust our end-to-end, cloud-driven networking solutions and rely on our top-rated services and support to accelerate their digital transformation efforts and deliver progress like never before. For more information, visit Extreme's website or follow us on Twitter, LinkedIn, and Facebook.

We encourage people from underrepresented groups to apply. Come Advance with us! In keeping with our values, no employee or applicant will face discrimination/harassment based on race, color, ancestry, national origin, religion, age, gender, marital or domestic partner status, sexual orientation, gender identity, disability status, or veteran status. Extreme Networks also strives to prevent other forms of inappropriate behavior from ever gaining a foothold in our organization. Barriers to success have no place at Extreme Networks.