Senior DevSecOps Engineer

About The Job Acalvio Technologies is a pioneering company in the field of cyber deception technology, offering innovative solutions to proactively defend enterprises against complex security threats. Backed by 25 issued patents in autonomous deception technology and advanced AI, Acalvio provides solutions for Identity Threat Detection and Response (ITDR), Advanced Threat Defense (ATD)for IT , OT, hybrid, and other networks, Cloud Deception Security, and Ransomware Protection. Headquartered in Silicon Valley, Acalvio serves Fortune 500 companies and government agencies, with flexible deployment options including Cloud, on-premises, and managed service providers.

Role Description We are looking for a Senior DevSecOps Engineer who thrives in a fast-paced environment and possesses a blend of deep technical expertise in both development, security, and operations. This is a critical position that directly influences the reliability, availability, and performance of our core systems and applications.

You will be a key contributor to our architecture and operations, driving efforts across automation, site reliability, security compliance, and platform initiatives. This role is highly versatile and extends beyond traditional operations, often involving research and developmental efforts to support our product roadmap and ensure customer success.

Key Responsibilities As a Senior DevSecOps Engineer, you will be responsible for a wide array of high-impact initiatives

Automation, Site Reliability, And Cloud Operations

• Platform Engineering: Actively contribute to the design, build-out, and maintenance of our core cloud-native platform infrastructure.
• Site Reliability: Design and implement robust monitoring, logging, and tracing solutions, developing effective
• Monitoring and Alerting Workflows to maintain high system reliability and quickly identify and resolve incidents.
• Operationalize New Technology: Research, evaluate, and integrate emerging technologies and tools to enhance our operational efficiency and platform capabilities.
• Cloud Governance & FinOps: Implement and manage
• Cloud FinOps Automation and Cost Control strategies to optimize cloud spend without compromising performance or security.
• System Architecture & Design: Participate actively in the system architecture and design discussions for new and existing cloud-native applications, ensuring they meet scalability and performance standards.
• Provide expert Field Support by acting as a technical liasion for critical production issues, offering operational insights, and assisting product and support teams with advanced troubleshooting.

Security And Compliance Engineering

• Integrate security tools and processes seamlessly into the CI,CD pipelines (Security as Code).
• Drive initiatives for vulnerability management, secrets management, and policy enforcement across our cloud & corporate environments.
• Manage and configure a diverse set of security tools, including Web Application Firewalls (WAF), Cloud Security Posture Management (CSPM), and Security Information and Event Management (SIEM) systems.
• Zero Trust Architecture: Design, implement, and manage Zero Trust Network Access (ZTNA) technologies and policies to enforce least-privilege access for users, applications, and services.
• Ensure the platform and applications adhere to relevant security standards and regulatory compliance ISO 27001, SOC 2, FEDRAMP).

Qualifications Required

• 10+ years of experience in a DevOps, SRE, or equivalent role, with a strong focus on security and platform engineering.
• Expertise with major cloud providers (AWS, Azure, or GCP).
• Deep proficiency in Infrastructure as Code (e.g., Terraform, CloudFormation, Helm).
• Strong scripting and automation skills (e.g., Python, Go, Bash).
• Proven experience implementing and managing CI,CD pipelines (e.g., GitLab CI, Jenkins, ArgoCD).
• Familiarity with containerization and orchestration technologies (Docker, Kubernetes).
• Critical thinking, problem-solving skills, and the ability to work collaboratively in a hybrid environment

Preferred

• Hands-on experience implementing security controls, static,dynamic application security testing (SAST,DAST), and cloud security posture management (CSPM).
• Experience with serverless technologies (e.g., Lambda, Azure Functions, Cloud Functions).
• A background in software development is a significant plus.
• Experience with agentic AI & application in SecOps workflows.
• Relevant certifications such as AWS Certified DevOps Engineer, Certified Kubernetes Administrator, or similar are a plus