Staff Engineer, DevSecOps

As a DevSecOps Engineer, you will

• Influence: Make an impact across projects and products by improving security, reliability, and delivery.
• Technology: Apply strong expertise in DevSecOps, AWS, CI/CD, Infrastructure as Code, containers, automation, and security.
• System: Scope, design, and deliver medium-to-large initiatives while reducing technical debt, risk, and operational complexity.
• People: Support and mentor team members by sharing knowledge and promoting collaboration.
• Process: Follow and improve engineering and DevSecOps practices to enable a secure, reliable flow of features to production.
• These are the types of things you’ll be working on
• Design, develop, test, deploy, and maintain scalable, secure, and high-quality software services, with an emphasis on backend systems, microservices, and APIs.
• Participate in architecture and design discussions, providing expertise on cloud architecture, application security, scalability, reliability, and appropriate technologies and frameworks.
• Build and maintain CI/CD pipelines that automate software build, test, security validation, deployment, and release processes across development and production environments.
• Implement and maintain Infrastructure as Code (IaC) using tools such as Terraform, CloudFormation, or equivalent technologies to provision and manage AWS infrastructure consistently and securely.
• Develop and manage containerized applications and supporting platforms using technologies such as Docker and Kubernetes/EKS.
• Apply DevSecOps practices by integrating security controls, automated security testing, vulnerability scanning, secrets management, and compliance checks throughout the software development lifecycle.
• Deploy and maintain observability solutions for microservices and APIs, including centralized logging, metrics, distributed tracing, alerting, and performance monitoring.
• Troubleshoot complex application, infrastructure, deployment, and production issues; perform root-cause analysis and implement preventative improvements.
• Conduct code, architecture, infrastructure, and security reviews to identify risks, vulnerabilities, reliability concerns, and opportunities for improvement.
• Participate in vulnerability management, threat assessments, security reviews, and remediation activities across applications, containers, dependencies, and AWS infrastructure.
• Implement and maintain AWS security, compliance, governance, and access-control practices in accordance with organizational policies and applicable industry standards.
• Develop and maintain technical documentation, including architecture diagrams, deployment procedures, runbooks, API documentation, security controls, and operational procedures.
• Collaborate with software engineers, architects, security teams, infrastructure teams, and other stakeholders to establish secure and reliable engineering practices.
• Mentor engineers and promote a culture of automation, security, reliability, continuous improvement, and knowledge sharing.
• Evaluate emerging technologies and recommend tools and practices that improve engineering productivity, security, scalability, and operational efficiency.
• Contribute to technical estimation, prioritization, planning, and delivery of engineering initiatives.

• Tech used, but not limited to: Python & Kubernetes required
• Groovy
• Bash
• Go
• Maven
• Jenkins
• Terraform
• Docker

Nice to have

• Experience working on a large-scale, production-ready systems
• PostgresSQL
• Github Actions
• Camunda
• FHIR
• AI/ML