DevSecOps Engineer

Senior DevSecOps Engineer – AWS & Financial Services

Organization: Information Technology
Position Type: Contract
Visa: U.S. Citizen, Green Card
Openings: 1

Position Summary

The Senior DevSecOps Engineer will be responsible for designing, implementing, and optimizing secure, scalable, and highly available cloud infrastructure and software delivery platforms within an enterprise environment.

The role will focus on integrating security throughout the software development lifecycle, automating infrastructure and application deployments, and establishing robust CI/CD pipelines across AWS cloud environments.

The ideal candidate will have strong experience in AWS, DevSecOps, cloud architecture, Infrastructure as Code, CI/CD, containerization, security automation, and enterprise application platforms, preferably within financial services, banking, capital markets, or another highly regulated industry.

Key Responsibilities DevSecOps & CI/CD

• Design, implement, and maintain enterprise-grade CI/CD pipelines for application and infrastructure deployments.
• Integrate security controls and automated security testing throughout the software development lifecycle.
• Implement DevSecOps practices across development, testing, deployment, and production environments.
• Automate build, deployment, testing, configuration, and release processes.
• Establish engineering standards and best practices for secure software delivery.
• Improve deployment reliability, scalability, speed, and operational efficiency.

AWS Cloud Engineering

• Design and implement secure, scalable, and highly available AWS cloud architectures.
• Work with AWS services including EC2, S3, VPC, IAM, RDS, Lambda, EKS, ECS, API Gateway, CloudWatch, KMS, and related services.
• Develop cloud landing zones, networking, identity, security, monitoring, and governance capabilities.
• Support cloud migration, modernization, and application transformation initiatives.
• Optimize cloud infrastructure for performance, reliability, security, and cost.

Infrastructure as Code & Automation

• Develop and maintain Infrastructure as Code using Terraform, CloudFormation, or similar technologies.
• Automate infrastructure provisioning, configuration, and application deployment.
• Develop reusable infrastructure modules and deployment patterns.
• Implement automated compliance and security checks within infrastructure pipelines.
• Use scripting and automation to improve operational efficiency and reduce manual processes.

Cloud Security

• Integrate security controls into cloud infrastructure and application delivery pipelines.
• Implement IAM, encryption, secrets management, network security, vulnerability management, and access controls.
• Partner with Information Security teams to identify and remediate security vulnerabilities.
• Implement security scanning and automated policy enforcement across cloud environments.
• Support compliance with enterprise security policies and regulatory requirements.
• Apply security frameworks and best practices such as NIST, PCI DSS, and secure SDLC principles.

Containers & Kubernetes

• Design, deploy, and manage containerized applications using Docker and Kubernetes.
• Support AWS EKS/ECS environments and container orchestration.
• Implement container security, image scanning, vulnerability management, and secure deployment practices.
• Develop automated deployment strategies for microservices and distributed applications.

Monitoring & Operational Excellence

• Implement monitoring, logging, alerting, and observability across cloud and application environments.
• Use tools such as AWS CloudWatch, Datadog, Splunk, or similar platforms.
• Identify performance, availability, and security issues and drive proactive remediation.
• Support incident response, root-cause analysis, and production stability.
• Establish operational standards for highly available and resilient systems.

Architecture & Collaboration

• Collaborate with Software Engineering, Architecture, Security, Infrastructure, Product, and Business teams.
• Provide technical guidance on cloud architecture, DevSecOps practices, and secure application delivery.
• Participate in architecture reviews and technology modernization initiatives.
• Work with development teams to improve application deployment and operational processes.
• Support distributed and offshore engineering teams when required.

Required Qualifications

• Bachelor's degree in Computer Science, Engineering, Information Technology, or a related technical field.
• 8+ years of experience in DevOps, DevSecOps, Cloud Engineering, Infrastructure Engineering, or Software Engineering.
• Strong hands-on experience with AWS cloud services and architecture.
• Strong experience designing and implementing CI/CD pipelines.
• Experience with Infrastructure as Code, particularly Terraform or CloudFormation.
• Strong understanding of DevSecOps and secure software development practices.
• Experience with Docker and Kubernetes.
• Strong scripting/automation experience using Python, Bash, PowerShell, or similar technologies.
• Experience with cloud security, IAM, vulnerability management, encryption, and secrets management.
• Experience with monitoring, logging, observability, and production support.
• Strong understanding of networking, APIs, microservices, and distributed systems.

Pay: $50.00 - $70.00 per hour

Work Location: In person