Senior DevSecOps Engineer

Responsibilities

• Own Supio’s SOC 2, HIPAA, and GDPR infrastructure compliance programs.
• Automate audit evidence collection, remediation workflows, and continuous control monitoring.
• Build and operate production cloud, Kubernetes, Terraform, CI/CD, and observability infrastructure.
• Develop and ship production tooling and automation.
• Design and maintain IAM and access controls across cloud, source control, and internal tools.
• Identify and remediate CVEs across infrastructure and application code in partnership with engineering.

Requirements

• 5+ years of experience in infrastructure, platform, or SRE engineering, including direct ownership of security and compliance work at a large organization.
• Strong hands-on experience with AWS, Kubernetes, and Terraform.
• Ability to write and ship production software rather than only scripts.
• Hands-on experience taking systems through SOC 2, HIPAA, and GDPR audits from the engineering side.
• Experience designing and operating cloud IAM and access controls.
• Bachelor’s degree in computer science or a related field, or equivalent practical experience.
• Preferred qualifications include experience with Vanta, SAST/SCA scanners, policy as code, AI governance frameworks, open-source security or infrastructure contributions, and PII/PHI-heavy industries.

Benefits

• Base salary, meaningful equity, and benefits are offered.
• Annual base salary is $180,000–$220,000.
• Equity grants are designed to provide long-term company upside.