Lead DevSecOps Engineer

Job Overview:

We are seeking an experienced Lead DevSecOps Engineer to strengthen the security and reliability of our cloud applications and CI/CD workflows and to provide technical direction to the DevSecOps effort. This position continues the ongoing security automation work established under the current DevSecOps role. The ideal candidate brings solid security and cloud expertise, a collaborative approach to leading engineers, and a commitment to contributing directly to meaningful non-profit technology projects.

Key Responsibilities:

• Lead the technical department and assemble a DevSecOps engineering group
• Create a productive channel of communication and cooperation between the engineers and other key stakeholders
• Examine requirements and create or revise estimates for the work’s scope
• Develop, specify, and evaluate architecture designs for infrastructure and procedures for DevSecOps
• Resolve challenging issues that arise during project implementation
• Use hands-on coding or scripting to solve problems with a custom workflow(s)
• Create and implement application-level logging and monitoring systems

Skills and Qualifications:

• 5+ years of practical expertise utilizing AWS and development platforms, such as GitHub, to automate infrastructure and deliver software
• Associate level AWS (Solutions Architect/CloudOps Engineer), Cloud+, or similar certification
• Knowledge of security and privacy frameworks (NIST 800-53, SOX, PCI-DSS, GDPR, etc.)
• Knowledge of the whole software development life cycle, from planning through to maintenance
• Knowledge of the AWS cloud platform, including EC2, VPC, IAM, S3, ECS/EKS, RDS, and Lambda
• Knowledge of DevOps instruments, such as CloudFormation/Terraform, Ansible, and others
• Ability to assess and create procedures for site reliability and auditing
• Practical knowledge of Windows, Linux, containers, databases, and scripting
• Ability to lead and provide technical direction to distributed teams
• Strong verbal and written communication abilities

Preferred Experience:

• Professional level AWS (Certified Solutions Architect, AWS Security Specialty), CySA+ certification or higher
• Significant working knowledge of distributed infrastructures
• Understanding of the typical difficulties associated with migrations and modernizations,
• as well as the capacity to select the best course of action
• Ability to contribute to Incident Response and Business Continuity Planning
• Experience with scripting languages such as JavaScript, Python, PHP, etc.