Senior DevSecOps Engineer

As a Senior DevSecOps Engineer you will serve as a technical leader at the intersection of development, security and operations for our cloud team supporting the secure transmission, processing, and storage of data from IoT devices. In this role, you will ensure that all cloud services, networks and data pipelines are secure and compliant with industry standards. You will work closely with the development team, prioritizing a “Shift Left” culture by automating compliance and security scanning throughout the software development lifecycle, empowering developers to maintain high velocity without compromising on industry standards.

Responsibilities

Serve as a technical leader at the intersection of development, security and operations for the cloud team supporting secure transmission, processing, and storage of data from IoT devices; Design and implement secure-by-default cloud infrastructure to handle data transmitted from IoT devices and between cloud services; Develop secure mechanisms for data storage and processing, including encryption and secure authentication frameworks; Enable provisioning of secure cloud infrastructure through infrastructure as code (IaC) modules; Ensure all data transmitted from IoT devices to the industrial cloud is encrypted and securely handled; Implement network-level security measures to protect cloud infrastructure from threats like man-in-the-middle attacks, DDoS, and unauthorized access; Develop security protocols for managing data at rest and in transit across cloud services; Oversee integration of cloud services to ensure secure data ingestion, storage, and processing; Implement and maintain secure access control mechanisms; Manage secure API connections and authentication methods between cloud systems and other enterprise services; Ensure the industrial cloud infrastructure complies with security standards such as ISO 27001 and ongoing compliance through regular audits and assessments; Conduct vulnerability assessments and security reviews of the cloud environment; Perform threat modeling and vulnerability assessments to identify potential attack vectors; Implement security monitoring and alerting systems to detect and respond to potential threats; Collaborate with cloud engineers, network security teams, DevOps and other DevSecOps engineers to ensure security is integrated throughout the cloud infrastructure and software development lifecycles; Provide mentoring on secure cloud infrastructure design, development, and maintenance; Lead security awareness and training programs

Requirements

B.S. in Computer Science, Cybersecurity, Engineering or equivalent years of work experience; 5+ years of experience in cloud security, with a focus on securing cloud infrastructure for data processing and storage

Nice to have

Strong understanding of cloud security, identity management, secure communication protocols (e.g., TLS), and data encryption; Proven experience working with public cloud platforms (e.g., AWS, Azure, Google Cloud) to secure cloud environments and services; Experience with SAST/DAST tools, container security and vulnerability management; Knowledge of ISO 27001 compliance requirements for cloud environments; Experience with infrastructure as code, preferably Terraform; Certifications such as CISSP, CCSP, GCSA or cloud-specific security or automation certifications are highly desirable

Benefits

Medical, dental and vision plans; Life insurance; Long-term disability; Flexible spending accounts; Health savings accounts; Accrued paid time off; Paid holidays; 401(k) retirement benefits; Variable compensation including short-term and long-term incentives