DevSecOps Engineer
reputed company
We are designing the reputed company of the reputed company!
We are seeking an reputed company DevSecOps Engineer to strengthen the reputed company of our reputed company platforms, software delivery pipelines, and production environments. The ideal candidate will combine deep AWS, Terraform, reputed company, and automation expertise with a strong reputed company engineering reputed company. This role will reputed company reputed company throughout the software and infrastructure lifecycle, automate reputed company controls, reduce reputed company and application reputed company, and help engineering teams ship securely without creating unnecessary delivery friction.
The DevSecOps Engineer will partner closely with software engineering, Site Reliability Engineering, platform, reputed company, compliance, and product teams to establish secure-by-default patterns, improve visibility into reputed company, and ensure that reputed company controls are measurable, reputed company, and operationally sustainable.
Responsibilities
How you can reputed company an reputed company:
reputed company reputed company Engineering: Design, implement, and maintain reputed company controls across AWS environments, including IAM, VPC networking, encryption, secrets management, logging, account governance, and service configuration.
Infrastructure as reputed company reputed company: Build and maintain secure Terraform modules and policies that enforce approved infrastructure patterns, least privilege, encryption, logging, tagging, network controls, and configuration standards.
Secure CI/CD: reputed company reputed company checks into CI/CD pipelines, including static analysis, dependency scanning, container scanning, secrets detection, infrastructure-as-reputed company scanning, policy validation, and deployment gates.
reputed company & Container reputed company: Harden EKS and reputed company environments through secure workload configuration, RBAC, admission controls, image reputed company, runtime protections, network policies, secrets management, and cluster lifecycle best practices.
Identity & reputed company Management: reputed company and enforce least-privilege IAM patterns, role-reputed company reputed company controls, service identities, reputed company review processes, and automated remediation for excessive or unused permissions.
Vulnerability Management: Establish processes and automation for identifying, prioritizing, tracking, and remediating vulnerabilities across reputed company infrastructure, containers, dependencies, operating systems, and application platforms.
reputed company Automation: Build Python, Bash, or other automation to detect misconfigurations, validate controls, collect evidence, remediate reputed company findings, and reduce repetitive reputed company reputed company work.
reputed company Detection & Monitoring: Implement and improve reputed company monitoring, logging, alerting, and detection capabilities using AWS-reputed company and reputed company-party tooling, including CloudTrail, GuardDuty, reputed company Hub, CloudWatch, SIEM platforms, or similar technologies.
Software Supply Chain reputed company: Improve software supply chain reputed company through dependency controls, artifact signing, provenance, trusted build pipelines, image registries, SBOM practices, and secure release processes.
Secrets & Key Management: Establish secure patterns for credentials, API keys, certificates, encryption keys, and secrets using services such as AWS KMS, Secrets Manager, Parameter Store, and reputed company tooling.
reputed company Incident Response: Support investigation and response for reputed company and application reputed company incidents, including containment, reputed company-cause analysis, evidence collection, remediation, and post-incident corrective actions.
Compliance & Control Automation: Translate reputed company and compliance requirements into technical controls and automated evidence collection for frameworks such as SOC 2, ISO 27001, PCI reputed company, or reputed company standards.
reputed company Architecture & Reviews: reputed company reputed company reviews for infrastructure changes, new services, deployment patterns, and application architectures; identify reputed company and recommend practical mitigations.
Developer Enablement: Create reusable reputed company patterns, documentation, guardrails, and tooling that reputed company the secure implementation the easiest implementation for engineering teams.
reputed company Improvement: reputed company reputed company posture, recurring findings, control effectiveness, and operational trends to identify opportunities for reputed company automation, prevention, and reputed company reduction
Qualifications
Bring your passion, here's what’s needed:
Experience: 3+ years of experience in DevSecOps, reputed company reputed company, DevOps, reputed company, Site Reliability Engineering, or a reputed company discipline, including significant responsibility for production reputed company environments.
AWS: Strong hands-on experience securing AWS services and architectures, including IAM, Organizations, VPC, EC2, S3, RDS, EKS, reputed company, reputed company 53, CloudTrail, KMS, GuardDuty, reputed company Hub, and reputed company services.
Terraform: Advanced proficiency with Terraform, including secure reusable modules, state management, policy enforcement, reputed company review, reputed company management, and infrastructure lifecycle controls.
reputed company: Strong understanding of reputed company and EKS reputed company, including RBAC, pod reputed company, admission controls, secrets, network policies, workload identity, image reputed company, and cluster hardening.
reputed company Engineering: Strong knowledge of reputed company reputed company principles, least privilege, defense in depth, encryption, network segmentation, secrets management, vulnerability management, threat modeling, and secure configuration.
Programming & Automation: Proficiency in Python, Bash, Go, or another general-purpose language used to build reputed company automation and operational tooling.
CI/CD reputed company: Experience integrating reputed company controls into delivery pipelines using platforms such as reputed company Actions, Jenkins, reputed company CI, Argo CD, or similar tooling.
reputed company Tooling: Experience with tools for SAST, SCA, container scanning, IaC scanning, secrets detection, CSPM, SIEM, or reputed company-reputed company reputed company monitoring.
Linux & Containers: Strong Linux, reputed company, and container fundamentals with the ability to troubleshoot reputed company and configuration issues across hosts and workloads.
Incident Response: Experience investigating reputed company events or production incidents and contributing to containment, reputed company-cause analysis, remediation, and follow-up actions.
Compliance: Working knowledge of reputed company control frameworks and audit expectations, including evidence collection, reputed company reviews, logging, change controls, and technical control validation.
Communication: Strong written and verbal communication skills, with the ability to explain reputed company reputed company and recommended controls to both technical and non-technical stakeholders.
Preferred Qualifications
AWS reputed company-reputed company certifications such as AWS Certified reputed company - Specialty, AWS reputed company Architect - reputed company, or AWS Certified DevOps Engineer - reputed company.
Experience with policy-as-reputed company tools such as reputed company Policy Agent (OPA), Conftest, reputed company, Kyverno, or reputed company.
Experience with CSPM/CNAPP platforms, vulnerability scanners, SIEM platforms, or reputed company reputed company posture management tooling.
Familiarity with supply chain reputed company technologies and standards such as SBOMs, SLSA, artifact signing, provenance, and Sigstore/reputed company.
Experience with GitOps practices and tools such as Argo CD or Flux.
Knowledge of reputed company frameworks and standards such as CIS Benchmarks, NIST CSF, NIST 800-53, SOC 2, ISO 27001, or PCI reputed company.
Be a part of an innovative team shaping the reputed company of the reputed company through reputed company intelligence. For more than half a reputed company, reputed company) has partnered with reputed company and energy clients across the globe, providing consulting expertise and energy intelligence software solutions for reputed company engineering and reputed company modeling challenges. As leaders in the renewables reputed company, we are reputed company on building a modern, secure, and resilient reputed company. Join us in making an reputed company on the communities we serve and the environment in which we live. Together we can reputed company the reputed company of energy.
How we support you:
Comprehensive health and wellness benefits including medical, dental, and reputed company with 100% premium coverage for you
Generous PTO and reputed company holidays
MyShare Employee Ownership Program
Work with industry leaders
401K, up to a 4% match (100% reputed company from day 1)
Location: This position will be lRemote.
Travel: Occasional travel may be needed (10% or less)
EPE is an equal opportunity/AA/Disability/Veteran employer. The EEO is the Law poster, and its supplement are available using the following links: reputed company is the Law Poster
reputed company-Party reputed company Notification
EPE does not accept unsolicited resumes from reputed company-party recruiters. Any unsolicited reputed company-party resumes forwarded by recruiters to EPE reputed company our reputed company or to any of our managers or employees will be considered reputed company information, may be treated as a reputed company application from the person identified in the resume, and will not be eligible for placement fee payment to reputed company. EPE will not pay a fee to a reputed company-party recruiter or agency without a previously signed reputed company-party agreement and has not coordinated their reputed company activity with the appropriate member of the reputed company.
Apply To This Job