devsecops engineer

Metova Federal

<div>Company Overview:
<div>
By Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and commercial IT customers worldwide.</div><div></div><div><br>
Cole Engineering Services (CESI), a By Light company, is recognized as a premier provider of modeling and simulation (M&amp;S) training solutions to the Federal Government and industry. Since 2004, CESI has been at the forefront of developing, maintaining, and integrating simulation-based training, serious gaming, technical services, training and other support in live, virtual, constructive, and gaming (LVCG) domains. CESI also designs, builds and runs infrastructure, platforms, applications and processes that enable cyber training for the integrated multi-domain force. Our vision is to become a worldwide full spectrum LVCG and cyber training/analysis developer, integrator and services provider.</div>
Position Overview:
<div>
Execute the development, operation and maintenance of DevSecOps processes, tools and an automation pipeline that supports traditional application software development, integration of third-party applications and Infrastructure as Code (IaC) scripts and software. Provide overarching technical guidance and support for a variety of development teams that results in a cohesive, functional system that is maintainable and can be deployed across a variety of connected and disconnected environments. Ensure the DevSecOps environment facilitates designing, implementing, deploying, and executing automated tests, and continually investigate new technologies to improve productivity, quality, ease of use and maintenance. Collect, process, and present information and metrics to show automation improvements or degradations over time. Drive platform improvements to increase and sustain availability of mission critical development tools.</div>
Responsibilities:
<ul><li>Ability to perform many duties involving DevSecOps functions including, but not limited to, authoring and maintaining automation deployment and monitoring scripts, developing and maintaining security controls and systems, managing virtualized and containerized assets, creating virtual and physical network configurations, servers, communications, and test and developer engineering support.</li><li>
Execute the design, integration, test and initial deployment of a variety of applications in an enterprise virtualized and containerized environment using modern tools and patterns.</li><li>
Be a results-oriented member for a team of engineers focused on providing an automated DevSecOps environment and supporting the automation of all aspects of system configuration and deployment</li><li>
Must be able to author and maintain scripts in a variety of languages.</li><li>
Must be able to author and maintain documentation pertaining to DevSecOps processes and automation.</li><li>
Administer and utilize the overarching configuration management tools and processes to ensure efficient and accurate tracking of baselines.</li><li>
Analyze real world problems and implement solutions that leverage industry best practices and improve the productivity of the overarching team.</li></ul>
Required Experience/Qualifications:
<ul><li>Bachelor&rsquo;s degree in a technical discipline such as computer science or information technology from an accredited college or university or relevant technical experience and technical certifications.</li><li>
Eight years of related professional work experience.<ul><li>
Experience implementing DevSecOps, DevOps, or IT or Security automation supporting multiple teams.</li></ul></li><li>
Knowledge of and ability to implement DevSecOps platform using private and commercial cloud best practices.</li><li>
Strong experience with the Linux OS.</li><li>
Experience with private and hybrid cloud design/operation/monitoring/deployment:<ul><li>
VMware vCenter and ESXi, generally maintained at the most current version.</li><li>
Practical knowledge of Kubernetes and general containerization development, security, deployment and management practices.</li><li>
Knowledge of ansible, terraform, and similar tools to automate deployment and destruction of virtual machines, networks, and other virtualized assets in VMware environments.</li></ul></li><li>
Prioritize multiple tasks, projects, and demands.</li><li>
Support documentation of DevSecOps and related technologies including the creation of system and process diagrams.</li><li>
Effective interpersonal and communications skills.<ul><li>
Professionally convey system-wide performance information routinely via tools such as PowerPoint, Excel, Visio, Jira, Confluence, etc.</li><li>
Train others to perform similar DevSecOps and automation tasks. Support a corporate library of knowledge by maintaining and evangelizing content.</li><li>
Interact with developers to understand software changes that will impact development and testing activities, examine any relevant change implementation, then report the changes to developers and testers welcoming feedback for future improvements.</li></ul></li></ul>
Preferred Experience/Qualifications:
<ul><li>Drive contributions to platform towards efficient use of the DevSecOps processes and tools.</li><li>
Troubleshoot capabilities to diagnose system problems; analyze hardware and software functionality; identify, locate, resolve and repair problems. Document and present performance records and results.</li></ul>
Special Requirements/Security Clearance:
<div>
Please note that pursuant to a government contract, this specific position requires U. S. Citizenship status and a SECRET security clearance, with an ability to obtain a TOP SECRET security clearance. Security Clearance requirements will be specified in the Government's Task Order.</div><div></div><div><br>
This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. The above is intended to describe the general contents of and requirements for the performance of this job.</div>
Benefits Overview:
<div>
CESI recognizes that our strength is our people. We support every employee as an individual to build strong teams across the enterprise. Our benefit package includes:</div><br>
<div></div><ul><li>
Medical, Dental &amp; Vision Coverage</li><li>
Wellness Program</li><li>
401(k) Matching</li><li>
Disability (Short Term &amp; Long Term)</li><li>
Employee Assistance Program</li><li>
Education &amp; Training</li><li>
Generous Leave Policy (11 Federal Holidays, PTO, Military Leave, Bereavement and Jury Duty)</li></ul><div>
CESI is committed to principles of inclusion and equal employment opportunity. We foster a non-discriminatory, professional work environment for all our teams. We do not discriminate based on race, color, religion, sex, pregnancy, sexual orientation, gender identity, genetic information, national origin, age, marital status, disability, or veteran status.</div></div>

DevSecOps Engineer

LIGHTFEATHER IO LLC

<div><p>LightFeather is seeking a <b>DevSecOps Engineer</b> who will play a critical role in designing, implementing, and maintaining cloud infrastructure solutions within Google Cloud Platform (GCP). This role requires expertise in infrastructure automation, cloud security, networking, and CI/CD pipeline development. The ideal candidate will work closely with cross-functional teams to drive cloud optimization and automation efforts in a high-security government environment.</p>
<p>
This role offers an exciting opportunity to shape cloud automation and infrastructure strategies in a high-impact government environment.</p>
<ul>
<li><b>Location</b>: In-Person (5 days/week) in Washington, DC</li>
<li><b>Job Type</b>: Full Time</li>
<li><b>Citizenship</b>: U.S. Citizenship Required</li>
<li><b>Clearance Requirement</b>: Willing to obtain a Top Secret security clearance</li>
</ul><div><b>Key Responsibilities</b></div>
<ul><li>Design, implement, and manage secure and scalable cloud infrastructure using GCP.</li>
<li>Develop and maintain infrastructure-as-code (IaC) using Terraform, Deployment Manager, or similar tools.</li>
<li>Support CI/CD pipeline automation, integration, and management.</li>
<li>Collaborate with software engineers, security personnel, and government stakeholders to support development and deployment workflows.</li>
<li>Monitor system performance, troubleshoot issues, and ensure cloud services meet SLAs.</li>
<li>Implement cloud best practices and ensure compliance with federal security standards (e.g., FedRAMP, NIST).</li>
<li>Provide documentation and knowledge sharing with the broader engineering team.</li>
</ul>
<p><b>Required Qualifications</b></p>
<ul>
<li>Willing to obtain a Top Secret security clearance</li>
<li>4+ years of experience in cloud engineering, with at least 2 years on GCP.</li>
<li>Hands-on experience with GCP services such as Compute Engine, Cloud Functions, VPC, IAM, GKE, and BigQuery.</li>
<li>Experience with infrastructure-as-code tools like Terraform, Ansible, or Deployment Manager.</li>
<li>Familiarity with CI/CD tools such as GitLab CI, Jenkins, or Cloud Build.</li>
<li>Solid understanding of Linux systems, networking, and containerization (Docker, Kubernetes).</li>
<li>Experience working in an Agile/Scrum environment.</li>
</ul>
<p><b>Preferred Skills</b></p>
<ul>
<li>GCP Professional Cloud Architect or DevOps Engineer certification.</li>
<li>Experience supporting federal government contracts and understanding of ATO processes.</li>
<li>Familiarity with other cloud platforms (AWS, Azure) is a plus.</li>
<li>Scripting skills in Python, Bash, or Go.</li>
</ul><h3 class="jobSectionHeader"><b>Why Join LightFeather?</b></h3>
<p>
At LightFeather, you're not just taking a job&mdash;you're joining a purpose-driven team that delivers innovative, mission-critical solutions to make a real difference. You'll work on diverse, meaningful projects that challenge and inspire you, alongside some of the best minds in the industry.</p></div>

Netrist

<div><div><h3 class="jobSectionHeader"><b>Job Information</b></h3>
<ul><div><p>Date Opened</p>
<div><b>10/30/2025</b><b>
</b></div></div><div><p>Job Type</p>
<div><b>Full time</b><b>
</b></div></div><div><p>Work Experience</p>
<div><b>8+ Years</b><b>
</b></div></div><div><p>Industry</p>
<div><b>Technology</b><b>
</b></div></div><div><p>City</p>
<div><b>Scott Air Force Base</b><b>
</b></div></div><div><p>State/Province</p>
<div><b>Illinois</b><b>
</b></div></div><div><p>Country</p>
<div><b>United States</b><b>
</b></div></div><div><p>Zip/Postal Code</p>
<div><b>62225</b><b>
</b></div></div></ul></div><div><h3 class="jobSectionHeader"><b>Job Description</b></h3>
<div><div><b>Description Summary</b>
<br>
</div><div>We are looking for a Senior DevSecOps Engineer to design, build, and enhance the automation technologies that power a critical mission planning system for our government customer. This role is important to ensure secure, reliable, and scalable automated delivery of infrastructure and applications.<br>
</div><div>
This position will require at least two days per week of work on-premise at Scott AFB.<br>
</div><div>
What you will do:<br>
</div><ul><li>Infrastructure Automation: Design, implement, and extend Infrastructure-as-Code (IaC) to support consistent, repeatable, and secure environments across development, testing, and production.</li><li>Build and Evolve CI/CD Pipelines: Develop and maintain automated Continuous Integration / Continuous Delivery (CI/CD) pipelines for rapid, secure, and error free deployments with no disruption in service to mission partners.</li><li>Implement DevSecOps Best Practices: Integrate security controls, compliance requirements, automated testing, and observability directly into build and deployment workflows.</li><li>Security: Align the IaC with DoD Zero Trust principles and support the upcoming Zero Trust security changes with new security automation. Interpret and, through automation, implement security mitigations from ACAS findings, STIG Guidelines, CIS Benchmarks, Zero Trust requirements, and other security standards as required by the program</li><li>Collaborate and Mentor: Work closely with development, testing, security, and scrum master teams to plan and execute IaC in response to business need. Mentor mid-level and junior engineers through code reviews and by providing guidance.</li><li>Continuous Improvement: Identify opportunities to optimize builds, deployments, and operational process through automation and standardization.</li><li>Networking and Infrastructure Integration: Engineer and automate network configurations, security groups, VPNs, load balancers, and firewalls within cloud and hybrid environments to ensure secure, resilient connectivity.</li><li>Follow Agile Development Methodologies: Actively participate in the Agile development process by breaking epics into stories, adding acceptance criteria, estimating stories in points, and updating stories in Jira.</li><li>Monitoring and Reliability Engineering: Engineer automated monitoring, alerting, and system observability to improve system visibility, reliability, and resilience. Support the monitoring of all customer-facing environments during working hours.</li><li>Respond to System Issues: Respond to issues in all environments by providing troubleshooting expertise, repair actions, and root cause analysis. For root causes that can be fixed by DevSecOps, create an Epic, define the changes required, and work through the Agile development process to implement and deploy the fix.</li><li>Provide On-Call Support at least one week per month, be available via phone and no further than 1 hour from Scott AFB</li><li>Create self-healing automation that triggers when issues occur to avoid being called for support on nights and weekends</li><li>Support Kubernetes and Containerization by collaborating / contributing to the creation of IaC for Kubernetes cluster deployment, security, and maintenance. Support the containerization of system components, providing developers with the tools and automation required for rapid declarative deployments. Extend the containerization automation through GitOps tools and methodologies.</li></ul><div></div><div><b><br>
Requirements</b><br>
</div><ul><li>Technical Expertise: Proven experience with tools such as Terraform, Ansible, Jenkins, GitLab CI, or similar for IaC and CI/CD automation.</li><li>Cloud and Containerization: Strong background in cloud infrastructure (AWS, Azure, or GovCloud) and container orchestration (Kubernetes, Docker).</li><li>Security Automation: Hands-on experience implementing DevSecOps practices, including automated security scanning, compliance validation, and vulnerability management.</li><li>Scripting: Proficiency in one or more scripting languages such as Bash or PowerShell.</li><li>Networking and Infrastructure Integration: Experience with network configurations, security groups, VPNs, load balancers, and firewalls.</li><li>Methodology: Familiarity with Agile/Scrum development processes and modern DevOps toolchains.</li></ul><div></div><div><b><br>
What we like to see:</b><br>
</div><ul><li>Passionate about automation</li><li>Flexible with requirement changes</li><li>Enthusiastic about adopting DevSecOps</li><li>Able to work with minimal direction</li><li>Thrives when collaborating with a small team</li><li>Ready to continually learn AWS and Kubernetes on-the-job</li></ul><div></div><div><b><br>
You should have experience with:</b><br>
</div><ul><li>RedHat Enterprise Linux operating systems</li><li>Bash Scripting</li><li>Public Key Infrastructure (certificate generation and management, mTLS communication)</li><li>Networking and routing, especially in cloud environments and through DoD firewalls</li><li>MongoDB, IBM DataPower, Identity and Access Management, Queueing systems</li><li>AWS EC2, Networking, VPCs, etc.</li><li>Git, Gitlab, Jenkins, Artifactory, Confluence, Jenkins</li><li>Agile methodology</li></ul><div></div><div><b><br>
Qualifications:</b><br>
</div><ul><li>Security+ certification</li><li>8 or more years of experience in an engineering role (development or operations)</li><li>Bachelor&rsquo;s Degree in Computer Science, Engineering, or related field</li></ul><div></div><div><b><br>
Benefits</b><br>
</div><ul><li>Paid Time Off</li><li>Medical benefits: Health Care, Vision, Dental, Long and Short Term Disability, and Life Insurance</li><li>Dependent Care and Healthcare Flexible Spending Accounts</li><li>Annual Health Reimbursement Arrangement</li><li>Education Assistance Program</li><li>401(k) Plan</li></ul></div></div></div><p></p>

DevSecOps Engineer III

International Free Zone ...

The role involves implementing secure-by-default patterns, automating threat detection and prevention, and blocking non-compliant releases.Compliance by designDefine secure coding/config standards mapped to OWASP ASVS/Top-10, CIS, ISO 27001, NIST CSF (and UAE PDPL where applicable). Enforce automated reviews for all apps/code: SAST, SCA, IaC, container image scanning, DAST in ephemeral environment, document evidence for audits.Operate a risk-based manual review path for sensitive changes (e.g., auth, crypto, PII flows).Application Platform Security (mandatory Experience)Assess code base, custom widgets/extensions, OAuth scopes, and webhooks/integrations for authorization, input validation, secrets, and data protection.Enforce SSO/MFA, IP restrictions, field-level security, raw level security, and audit logs, align roles with least privilege.Add CI checks for exported code base (lint Deluge anti-patterns, detect secrets, verify integration scopes).Web application securityPartner with teams across front-end (React/Deluge) and back-end (Node/.NET/Python/Java) to triage/fix findings, codify guardrails for authentication/authorization, session management, CSRF, XSS, SSRF, SQLi, RCE, uploads, CORS/CSP, PHP.Maintain hardened Docker files, base images, and Kubernetes manifests (RBAC, Network Policies, resource limits), enforce Kyverno/Gatekeeper policies.Supply-chain &amp; provenanceGenerate/store SBOMs (CycloneDX/SPDX), implement artifact signing and provenance (in-toto/SLSA).Secure runners/agents, registries, and pipeline credentials, prevent tamperingSecrets &amp; configurationStandardize secrets management (Vault / cloud KMS), enable commit-time secret scanning (Gitleaks/TruffleHog), rotate credentialsAutomation &amp; enablementIntegrate scanners into GitHub Actions/Jenkins/GitLab/Azure DevOps, enable auto-fix PRs (Dependabot/Renovate/Snyk).Publish playbooks/checklists, deliver short enablement sessions, reduce false positives and improve DX.Observability &amp; audit readinessStream pipeline/runtime telemetry to SIEM/XDR, build dashboards for coverage, MTTR, and gate posture.Provide auditable evidence of control operation and exceptions.Client and Server-side authenticationShould have experience in REST API, OAuth 2.0, JWT, RLS, Session Management and SSO.API Security and ManagementShould have experience in determining scope of API and define rate-limits.RequirementsQualifications &amp; Skills5+ years in DevSecOps/Platform/Automation engineering with production CI/CD.Proven integrations of SAST, DAST, and SCA (e.g., Snyk, Checkmarx, SonarQube, OWASP ZAP, Burp Suite, Dependabot/Renovate).Strong scripting: Python, Bash, PowerShell.Hands-on with containers/Kubernetes (Docker, EKS/AKS/GKE), and IaC (Terraform, Helm/Kustomize).Should have experience in reviewing libraries, third-party libraries and open-source scripts.CI/CD expertise: GitHub Actions/GitLab/Jenkins/Azure DevOps (runners, credentials, caching, matrix builds).Solid grasp of software supply-chain risks (SBOMs, signing, provenance) and secrets management.Applied knowledge of OWASP ASVS/Top 10, CIS Benchmarks, basic cryptography, least privilege/RBAC.ExperienceExperience with policy-as-code (OPA/Rego, Conftest), Kyverno rules.Familiarity with Microsoft Defender for Cloud / Defender for DevOps or cloud provider equivalents.Runtime/container security (Falco, eBPF-based detection).Cloud security posture tools (e.g., Prisma Cloud, Wiz, Defender for Cloud).

Stryker

<div>Work Flexibility: Remote or Hybrid or Onsite
<p></p><p><b>What You Will Do:
</b></p><p>The Cloud DevSecOps Engineer is responsible for keeping our multi-cloud platform fast, reliable, and transparent. This position will own the monitoring stack, automate incident response, and drive performance and cost optimization across production AWS/GCP workloads. Acting as the bridge between engineering, product, and compliance teams, the Cloud Operations and Observability Engineer will surface actionable insights and ensure compliance with relevant SOC 2 controls.
</p><p></p><p><b>Technical Responsibilities:
</b></p><ul><li>Design, deploy, and maintain <b>observability stacks </b>(Prometheus/Grafana, CloudWatch, Stackdriver, Datadog, or similar)
</li><li>Build and manage <b>CI/CD pipelines </b>and infrastructure-as-code (Terraform, CloudFormation, Pulumi)
</li><li>Automate incident response with runbooks, chat-ops, and auto-remediation scripts (e.g., Lambda, Cloud Functions)
</li><li>Optimize cloud cost and performance through right-sizing, autoscaling, and anomaly detection
</li><li>Lead <b>root-cause analysis </b>for availability, latency, and capacity events
</li></ul><p></p><p><b>Compliance and Regulatory Responsibilities:
</b></p><ul><li>Ensure logging, alerting, and backup configurations meet SOC 2 / ISO 27001 controls
</li><li>Document evidence for audit requests (access reviews, vulnerability scans, disaster-recovery drills)
</li></ul><p></p><p><b>General Responsibilities:
</b></p><ul><li>Participate in weekly on-call rotation (pager duty) and drive blameless incident retrospectives
</li>Mentor junior engineers on cloud-native best practices and observability tooling<br>
<li>
<br>
</li></ul><p><b>What You Will Need:
</b></p><p><i>Required Qualifications:
</i></p><ul><li>Bachelor&rsquo;s degree in Computer Science, Engineering, or related field
</li><li><b>4+ years </b>professional experience in cloud operations, SRE, or DevOps roles
</li><li>Hands-on experience with at least one major cloud provider (AWS, GCP, or Azure)
</li><li>Proficiency in scripting or programming (Python, PowerShell, Bash, or similar)
</li><li>Experience deploying and supporting monitoring/alerting platforms (Prometheus, Datadog, Grafana, New Relic, etc.)
</li></ul><p></p><p><i>Preferred Qualifications:
</i></p><ul><li>Certifications: AWS SysOps Administrator, Google Cloud DevOps Engineer, or Azure Administrator Associate
</li><li>Familiarity with Kubernetes, service mesh, and distributed tracing (Jaeger, OpenTelemetry)
</li><li>Experience meeting compliance frameworks (SOC 2, HIPAA, ISO 27001)
</li><li>Prior participation of on-call rotations and incident-management processes
</li></ul><p></p>$100k - $215k salary plus bonus eligible + benefits. Individual pay is based on skills, experience, and other relevant factors.<br>
<ul><li>
</li></ul><p></p><br>
Travel Percentage: 10%
<p></p>Stryker Corporation is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, gender identity, sexual orientation, national origin, disability, or protected veteran status. Stryker is an EO employer &ndash; M/F/Veteran/Disability.
<p></p>Stryker Corporation will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor&rsquo;s legal duty to furnish information.</div><p></p>

Staff Cloud DevSecOps Engineer

<div><p><b>Would you like to join the leading international intergovernmental organization?</b><br>
<br>
Allied Command Transformation (ACT) is NATO&rsquo;s leading agent for change: driving, facilitating, and advocating the continuous improvement of Alliance capabilities to maintain and enhance the military relevance and effectiveness of the Alliance.</p><p>
We are looking for a passionate DevSecOps engineer who will provide remote support to ACT's digital modernization initiatives, with a focus on building resilient, secure, and scalable applications across our client's hybrid and cloud environments. Responsibilities include deploying and operating containerized applications, automating infrastructure through Infrastructure as Code, and implementing observability practices to ensure reliability and performance. The role requires close adherence to cybersecurity and zero-<br>
trust principles, as well as integration of compliance automation and modern service mesh technologies. The engineer will deliver incremental capabilities in agile environments and collaborate with stakeholders to ensure that outputs meet the requirements for security, scalability, and operational readiness.</p><p><b><br>
Responsibilities:</b></p><ul>
<li>
Deploy and operate containerized services using orchestration frameworks to ensure scalability and resilience.</li>
<li>Automate infrastructure through Infrastructure as Code (IaC) to provide consistent and repeatable environments.</li>
<li>Deploy and monitor workloads in cloud environments (AWS, Azure, Google Cloud, VMware, OpenStack).</li>
<li>Implement site reliability engineering (SRE) and observability practices to ensure resilience, monitoring, logging, metrics, and distributed tracing.</li>
<li>Support high-throughput and service-oriented architectures, ensuring resilient and scalable deployments.</li>
<li>Deliver incremental capabilities in Agile and DevSecOps environments following frameworks such as Scrum, SAFe, or Kanban.</li>
<li>Design and manage secure networking and service meshes (TLS, Istio, Linkerd, API gateways) to ensure encrypted and reliable service-to-service communication.</li>
<li>Apply zero-trust principles and compliance automation to enforce security policies and validate system compliance.</li>
<li>Manage identity and access using secure methods for secrets, tokens, certificates, and least-privilege access control.</li>
</ul><p><b>
We are happy to hear from you if you have:</b></p><br>
<ul>
<li>
Minimum 4 years of experience with containerization and orchestration (Docker, Kubernetes, OpenShift).</li>
<li>Minimum 4 years of experience in designing and maintaining CI/CD pipelines with automated testing and security validation.</li>
<li>Experience with Infrastructure as Code (Terraform, Ansible, Helm, Pulumi).</li>
<li>Experience deploying and securing workloads in hybrid/public cloud environments (AWS, Azure, Google Cloud, VMware, OpenStack).</li>
<li>Experience implementing site reliability engineering and observability practices (Prometheus, Grafana, ELK/Loki, OpenTelemetry).</li>
<li>Experience implementing scalable, resilient, high-throughput systems and service-oriented architectures.</li>
<li>Experience delivering capabilities in Agile/DevSecOps environments (Scrum, SAFe, Kanban).</li>
<li>Experience designing and managing secure networking and service mesh (TLS, Istio, Linkerd, API gateways).</li>
<li>Experience applying zero-trust principles and compliance automation (OPA, Kyverno, SBOM, CIS benchmarks).</li>
<li>Experience managing secrets and access policies using modern IAM solutions (Vault, AWS KMS, Azure Key Vault, RBAC/ABAC).</li>
<li>Fluent English skills (verbal and written).</li>
<li>Bachelor&rsquo;s degree in Computer Science, Engineering, or a related field (or equivalent professional experience).</li>
<li><b>Willingness to work in EST time zone</b></li>
</ul><p>
If you've read the description and feel this role is a great match, we'd love to hear from you! Click &quot;Apply for this job&quot; to be directed to a brief questionnaire. It should only take a few moments to complete, and we'll be in touch promptly if your experience aligns with our needs.</p></div>

Senior DevSecOps engineer (EST timezone)

Tymex

<div><p><b>Role Overview</b></p><p>
We are seeking a <b>Senior/Lead Platform Engineer</b> who will take ownership of the design, implementation and operation of our core data, analytics and ML infrastructure. This role spans across <b>platform architecture, DevSecOps, DataOps, and ML infrastructure</b>, and requires a combination of strategic thought leadership and hands-on execution. You will build, integrate and operate platforms on <b>AWS and Databricks</b>, enabling scalable, secure, production-grade ML/AI solutions.</p><p><b>
Key Responsibilities</b></p><ul><li>
Architect and implement end-to-end data and ML platforms: data lakes, warehouses, streaming and batch pipelines, model training/deployment infrastructure, on AWS + Databricks.</li><li>
Lead DevSecOps and DataOps practices: infrastructure as code (IaC), CI/CD pipelines for data &amp; ML workflows, secure multi-account/multi-region cloud operations.</li><li>
Integrate AWS services (e.g., S3, Redshift, Kinesis, Lambda, EKS/ECS) with Databricks runtime, Delta Lake, Unity Catalog etc to build scalable, performant pipelines.</li><li>
Build and operate ML infrastructure: training clusters, model versioning, MLOps toolchain (e.g., MLflow), model monitoring and observability, automatic retraining workflows.</li><li>
Establish data governance, lineage, quality, observability standards across data pipelines and ML workflows.</li><li>
Mentor engineering teams, define architectural best practices and guide implementation of high-scale data/ML systems.</li><li>
Optimize system performance, cost and scalability; diagnose and resolve large-scale production issues.</li><li>
Continuously evaluate new tools and technologies in the areas of cloud, data platform, DevSecOps, ML infrastructure and apply them to drive innovation.</li></ul><p><b>
Requirements</b></p><ul><li>
7+ years of experience in data platform architecture, cloud/ML infrastructure engineering or related roles.</li><li>
Deep technical expertise in <b>Databricks and AWS</b>: demonstrated ability to design, integrate and operate solutions spanning both platforms.</li><li>
Strong hands-on implementation skills: you will not just design but build, deploy and operate the platform.</li><li>
Proven track record of building and operating scalable ML/AI platforms in production (model training &amp; deployment).</li><li>
Expertise in Apache Spark, Delta Lake, modern data pipeline frameworks (batch + streaming).</li><li>
Strong background in infrastructure as code (Terraform, CloudFormation), CI/CD for data/ML, and DevSecOps practices.</li><li>
Proficiency in Python and SQL; familiarity with Scala or equivalent is a plus.</li><li>
Experience with data governance, data lineage, observability and MLOps frameworks (e.g., MLflow, Airflow, dbt).</li><li>
Bonus: Experience in fintech, regulated industries or high-security environments.</li></ul><p><b>
Benefits</b></p><ul>
<li>Performance bonus up to 2 months</li>
<li>13th month salary pro-rata</li>
<li>15-day annual leave+ 3-day sick leave + 1 birthday leave + 1 Christmas leave</li>
<li>Meal and parking allowance are covered by the company.</li>
<li>Full benefits and salary rank during probation.</li>
<li>Insurances as Vietnamese labor law and premium health care for you and your family without seniority compulsory</li>
<li>SMART goals and clear career opportunities (technical seminar, conference, and career talk) - we focus on your development.</li>
<li>Values-driven, international working environment, and agile culture.</li>
<li>Overseas travel opportunities for training and working related.</li>
<li>Internal Hackathons and company's events (team building, coffee run, blue card...)</li>
<li>Work-life balance 40-hr per week from Mon to Fri.</li></ul></div>

Senior/ Lead Platform Engineer (Databrick)

Search 8117+ Devsecops engineer jobs near you this October. New roles added regularly across leading industries. Apply today.

8117 devsecops engineer jobs NEAR_ME

DevSecOps Engineer

DevSecOps Engineer

DevSecOps Engineer III

DevSecOps Engineer

Staff Cloud DevSecOps Engineer

Senior DevSecOps engineer (EST timezone)

Senior/ Lead Platform Engineer (Databrick)