Secure Cloud Infrastructure Specialist

Job Description:

We are seeking a highly skilled and motivated Senior DevSecOps Engineer to join our team. As a Senior DevSecOps Engineer, you will be responsible for designing, configuring, and securing our cloud infrastructure, as well as implementing and managing security tools to protect our critical workloads.

Our ideal candidate will have a strong working knowledge of AWS core and security services, including IAM, GuardDuty, SecurityHub, Config, Control Tower, and KMS. They will also have experience managing and securing Kubernetes/EKS workloads, with a focus on RBAC, secrets, and runtime security.

The successful candidate will have solid understanding of AWS networking and security fundamentals, including VPNs, VPCs, TGW, firewalls, and routing. They will also have practical knowledge of CSPM, SIEM, IDS/IPS, WAF solutions, and firewall appliances.

Additionally, our ideal candidate will have familiarity with code quality and security scanning tools, such as SonarQube, Codecov, Trivy, and Inspector. They will also have strong fundamentals in Linux/Unix, scripting (Bash/Python), and cloud automation.

As a Senior DevSecOps Engineer, you will have the opportunity to work closely with developers and platform engineers to enforce security without slowing down delivery. You will also have the chance to build secure automation workflows using Linux fundamentals, scripting, and IaC for repeatable, auditable infrastructure.

Key Responsibilities:

• Design, configure, and secure core AWS services
• Strengthen Kubernetes/EKS clusters with best practices around RBAC, secrets management, runtime security, and policy-as-code
• Implement and manage AWS security tools – IAM (SSO/Identity Center), SecurityHub, GuardDuty, Config, KMS, and Control Tower guardrails
• Security Harden and maintain next-gen firewalls (Palo Alto, Fortinet) and their integration into our AWS workloads, setup security observability
• Integrate security scanning into CI/CD pipelines (Trivy, SonarQube, Codecov, Inspector) to enforce quality gates
• Set up and tune CSPM and SIEM platforms, and deploy WAF (Cloudflare), IDS/IPS solutions for active threat detection and mitigation
• Build secure automation workflows using Linux fundamentals, scripting, and IaC for repeatable, auditable infrastructure
• Partner with developers and platform engineers to enforce security without slowing down delivery

Requirements:

• 4–7 years of experience in DevSecOps, Cloud Security, or Platform Engineering
• Strong working knowledge of AWS core and security services (IAM, GuardDuty, SecurityHub, Config, Control Tower, KMS)
• Experience managing and securing Kubernetes/EKS workloads, with focus on RBAC, secrets, and runtime security
• Solid understanding of AWS networking and security fundamentals (VPNs, VPCs, TGW, firewalls, routing)
• Practical knowledge of CSPM, SIEM, IDS/IPS, WAF solutions (Cloudflare) and firewall appliances (Palo/Fortinet)
• Familiarity with code quality and security scanning tools like SonarQube, Codecov, Trivy, Inspector
• Strong fundamentals in Linux/Unix, scripting (Bash/Python), and cloud automation
• Curiosity, eagerness to learn, and the ability to balance speed with security

What We Offer:

• Competitive salaries
• Comprehensive medical insurance for you & your family
• Flexible work hours
• Leaves & vacations crafted so you never miss what matters in life
• Recognition & rewards that turn big and small wins into celebrations
• A culture of learn and grow — upskilling opportunities, certifications, and hands-on exposure to cutting-edge tech
• And yes, food, games, and a workspace that feels less like an office and more like your second home