DevSecOps Engineer

Responsibilities

Required Qualifications

Preferred Qualifications

• Design and maintain scalable, automated, and secure AWS infrastructure using OpenTofu/Terraform.
• Support networking, identity, compute, storage, and Kubernetes services.
• Implement security best practices, including:
• System hardening
• Vulnerability and secrets management
• Least-privilege access
• Logging and monitoring
• Secure-by-default patterns
• Own engineering tickets from requirements through implementation, testing, rollout, documentation, and handoff.
• Independently manage work, resolve routine blockers, and maintain progress.
• Work with Kubernetes and container technologies such as Docker and Podman.
• Use AI-assisted development tools to improve coding, testing, documentation, and problem-solving.
• Review, test, and validate all AI-generated code and recommendations.
• Develop automated unit, integration, and validation tests for infrastructure code.
• Build automation and engineering utilities using Python and Bash.
• Participate in code reviews, design reviews, troubleshooting, and standards development.
• Collaborate with technology governance teams on engineering processes, security controls, and audit requirements.
• Maintain continuity across existing platform initiatives and active workstreams.
• 10+ years of experience in platform engineering, systems engineering, DevOps, SRE, cloud engineering, or a related field.
• Significant hands-on AWS experience supporting production workloads and platform services.
• Advanced OpenTofu/Terraform and Infrastructure as Code experience.
• Strong Kubernetes deployment, operations, support, and troubleshooting skills.
• Strong Docker and/or Podman experience.
• Proficiency in Python and Bash.
• Experience developing, testing, reviewing, and maintaining production-quality infrastructure code.
• Practical knowledge of hardening, vulnerability management, least privilege, secrets management, logging, and monitoring.
• Ability to deliver complex engineering work from requirements through production with limited supervision.
• Strong self-management, problem-solving, communication, and documentation skills.
• Experience with AI-assisted development tools such as GitHub Copilot, Claude Code, Codex, or comparable platforms.
• Ability to validate AI output through human review, testing, quality gates, and security standards.
• Experience with SOC 2, ISO 27001, NIST 800-53, or similar security frameworks.
• Experience with enterprise CI/CD platforms and secure delivery-pipeline design.
• Experience with automated Infrastructure as Code testing and validation.
• Experience integrating AI assistance into established engineering workflows while maintaining human review, security, testing, and change controls.

Project details

• Start: flexible
• Remote: hybrid
• Location: Boston, MA, United States, US