DevSecOps Engineer

DevSecOps Engineer

Expert Technical Solutions is seeking a DevSecOps Engineer for one of our premier, industry leading clients in New York, NY

This role requires a security-minded engineer who can bridge the gap between development, operations, and security to build and maintain resilient cloud infrastructure on AWS. The ideal candidate brings a strong blend of hands-on cloud engineering, security expertise, and software development fundamentals. This position reports directly to the Manager of Infrastructure and requires close collaboration across multiple departments.

This is a 9+ month Contract to Permanent, REMOTE opportunity offering strong pay, excellent benefits, and unlimited growth potential.

Primary Duties and Responsibilities:

• Design, implement, and maintain secure cloud infrastructure on AWS, including provisioning, configuration, and ongoing optimization of cloud environments.
• Perform comprehensive vulnerability assessments across cloud infrastructure, applications, and endpoints; prioritize and remediate findings in a timely manner.
• Analyze new container images, software packages, and third-party dependencies for security risks and CVE exposure, with a strong focus on Linux-based environments.
• Configure, manage, and monitor AWS firewall rules (Security Groups, NACLs, AWS Network Firewall) to enforce network security policies and protect cloud resources.
• Develop and maintain AWS monitoring and alerting solutions using CloudWatch, GuardDuty, Security Hub, and related services to ensure full observability across the environment.
• Write and maintain automation scripts in Python and Bash to streamline security operations, infrastructure provisioning, and incident response workflows.
• Manage and enforce IAM policies, roles, and access controls including key management and credential rotation to uphold the principle of least privilege.
• Administer and secure web servers, with hands-on experience configuring SSL/TLS certificates, managing HTTPS endpoints, and troubleshooting certificate chain issues.
• Develop and maintain internal tooling and applications using Flask and Python to support security and infrastructure operations.
• Leverage AWS Systems Manager (SSM) for patch management, remote command execution, and session management across managed instances.
• Integrate security practices throughout the Software Development Lifecycle (SDLC), including static analysis, dependency scanning, and secure code review.
• Work cross-functionally with development, operations, and business teams to embed security best practices into all phases of product delivery.
• Create and maintain documentation for security processes, runbooks, architecture diagrams, and incident response procedures.

Required Experience:

• Bachelor's Degree in Computer Science, Data Science or a relevant field
• 2+ years of hands-on DevSecOps experience
• Strong AWS cloud experience, including familiarity with architecture design, deployment, and security hardening.
• Demonstrated experience with AWS firewall services (Security Groups, NACLs, AWS Network Firewall, WAF).
• Proven experience with AWS monitoring and observability tools (CloudWatch, GuardDuty, Security Hub, Config).
• Expertise in vulnerability assessment, CVE analysis, and remediation within Linux environments.
• Ability to evaluate and analyze new images, software, and dependencies for security posture.
• Strong proficiency in Python scripting for automation, tooling, and security operations.
• Strong proficiency in Bash scripting for system administration and infrastructure automation.
• Deep understanding of SSL/TLS protocols, certificate management, and secure communications.
• Experience with IAM policy management, key management (KMS), and credential lifecycle management.
• Hands-on web server administration experience (Nginx, Apache, or similar).
• Experience developing applications or APIs with Flask.
• Strong understanding of the Secure Software Development Lifecycle (SDLC) and CI/CD security integration.
• Demonstrated ability to work cross-functionally across multiple departments including development, operations, and business stakeholders.
• Must be located in and available to work within the Eastern Daylight Time (EDT) time zone.

Preferred Skills:

• Telecomm Industry experience
• Experience with AWS Systems Manager (SSM) scripting and automation.
• Background in software development (beyond scripting), such as full-stack or backend engineering.
• AWS certifications such as AWS Certified Security – Specialty, AWS Certified Solutions Architect, or AWS Certified DevOps Engineer.
• Additional security certifications (e.g., CompTIA Security+, CISSP, CEH) are a plus.
• Experience with Infrastructure as Code tools (Terraform, CloudFormation, or CDK).
• Familiarity with container security (Docker, ECS, EKS) and container image scanning.