Senior DevSecOps Engineer

Description

**We are looking for a hands\-on** **Senior DevSecOps Engineer** **to help build secure, scalable, and reliable cloud infrastructure, Kubernetes platforms, and CI/CD pipelines. You will work closely with engineering and platform teams to integrate security into the software delivery lifecycle and make secure\-by\-default practices easy to adopt.** ============================================================================================================================================================================================================================================================================================================================================================= The role combines **DevSecOps, cloud security, infrastructure automation, Kubernetes security, and software supply\-chain security**, with a strong focus on practical engineering and automation. **Project Details** ------------------- * **Start:** ASAP * **Project duration:** 12 months\+ * **Locations:** Argentina, Brazil, Mexico * **Working hours:** EST business hours * **English:** B2\+ **Responsibilities** -------------------- * Integrate security into cloud infrastructure, Kubernetes platforms, CI/CD pipelines, and developer self\-service workflows. * Design and implement secure\-by\-default patterns for IAM, workload identity, secrets management, network security, infrastructure as code, application deployment, and workload protection. * Assess the current security landscape, identify gaps and risks, and establish scalable security practices within DevOps and platform teams. * Build automated, risk\-based security guardrails across source control, container builds, infrastructure changes, and application deployments using policy\-as\-code. * Strengthen Kubernetes, container, and software supply\-chain security, including cluster configuration, workload isolation, ingress, admission controls, runtime protection, dependency management, SBOMs, artifact signing, and build provenance. * Partner with engineering teams to identify, prioritize, and remediate vulnerabilities and security misconfigurations across cloud, Kubernetes, and CI/CD environments. * Support security incident response across infrastructure and delivery systems, including investigation, containment, recovery, and post\-incident improvements. * Translate security, regulatory, and audit requirements into practical and maintainable engineering controls. * Create automation, documentation, runbooks, and security standards, while mentoring engineers on DevSecOps best practices. **Requirements** ---------------- * **5\+ years** of hands\-on experience in DevSecOps, DevOps, Cloud Security, Platform Engineering, or a related role, with significant responsibility for security engineering and automation. * Strong hands\-on experience securing **AWS or Google Cloud**, including IAM, workload identity, networking, encryption, logging, and cloud\-native security controls. * Deep experience operating and securing **Kubernetes and containerized workloads**, including managed platforms such as Amazon EKS or Google Kubernetes Engine. * Strong hands\-on experience with **Terraform**, including reusable modules, dependency management, policy enforcement, and safe change management. * Strong understanding of **CI/CD and release engineering**, including artifact security, deployment controls, approval gates, trusted builds, and rollback strategies. * Experience implementing automated security controls such as vulnerability and dependency scanning, container image scanning, secrets detection, policy\-as\-code, infrastructure scanning, cloud configuration assessment, and software supply\-chain security. * Strong scripting or programming skills for automation, integrations, tooling, and operational problem\-solving. * Experience working in regulated or audited environments and translating frameworks such as **HIPAA, SOC 2, PCI DSS, HITRUST, or SOX** into engineering controls. * Strong communication and technical leadership skills, with the ability to balance security, reliability, developer experience, maintainability, and delivery speed. * **English: B2\+ or higher.** **Nice to have** ---------------- * Experience with **Terraform Cloud**, including workspace management, policy controls, remote execution, and state governance. * Experience with **GitOps** and delivery platforms such as Argo CD, Harness, or Codefresh. * Experience with observability and incident\-management platforms such as Datadog, Groundcover, or PagerDuty. * Experience with cloud security posture management, vulnerability management, workload/runtime protection, and endpoint security platforms such as Qualys, CrowdStrike, Prisma Cloud, Lacework, Wiz, or comparable tools.