Senior Cloud DevSecOps Engineer

What you'll do

• Lead the development and implementation of security engineering solutions for infrastructure automation and cloud governance.
• Design and maintain security guardrails using Terraform, including reusable modules and policy-as-code solutions.
• Develop automation tools in Java, Python, or Go to streamline developer workflows and minimize manual tasks.
• Create GitLab CI/CD pipelines that incorporate automated guardrail checks and deployment controls.
• Embed automated security controls into application workflows to reduce friction for engineering teams.
• Conduct AWS IAM reviews and configure resource policies based on the principle of least privilege.
• Mentor engineers on Infrastructure as Code best practices and cloud identity management.
• Participate in code reviews to provide feedback on secure coding practices and design quality.

What we're looking for

• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related technical discipline, or equivalent practical experience.
• 5+ years of progressive engineering and/or security experience.
• Extensive experience with AWS, including developing guardrails and detective controls.
• Expertise in Infrastructure as Code, especially Terraform, including reusable modules and policy-as-code (OPA or Trivy).
• Experience automating AWS guardrails, baseline configurations, identity bindings, and logging/monitoring controls.
• Strong knowledge of AWS IAM, including roles, permission boundaries, SCPs, and RCPs.
• Experience developing GitLab CI/CD pipelines and automating guardrail checks and deployment controls.
• Solid software engineering skills in Python, Go, or Java for automation tooling.
• Experience in financial services or other highly regulated environments (preferred).