Must have

• AWS

• Azure

• CI/CD Pipelines

• Python

• Bash

• PowerShell

• Security

• Docker

• Kubernetes

• AWS CloudTrail

• GuardDuty

• SecretsManager

• Vault

• Analytical skills

• Communication skills

• English

Nice to have

• AWS Security

• CISSP

• OSCP

Requirements description

• Minimum 5 years of experience in DevOps or DevSecOps roles with a strong focus on cloud security.
• In-depth knowledge of AWS or Azure security services and architectures.
• Experience with CI/CD pipelines and scripting languages such as Python, Bash, or PowerShell.
• Familiarity with security frameworks, compliance standards, and secure coding practices.
• Hands-on experience managing container security (e.g., Docker, Kubernetes).
• Proficient with tools like AWS CloudTrail, GuardDuty, Secrets Manager, Vault, or similar.
• Strong analytical, troubleshooting, and incident response skills.
• Relevant security certifications (e.g., AWS Security, CISSP, OSCP) are a plus.
• Excellent English communication skills, both written and spoken.
• Comfortable working with distributed teams and overlapping schedules with colleagues in Pakistan and the United States.

Offer description

About the Role:

We’re seeking an experienced Senior DevSecOps Engineer to help secure and optimize our cloud infrastructure and CI/CD environments. In this role, you’ll integrate security throughout the software development lifecycle, enabling fast, reliable, and compliant code delivery within a regulated medical technology environment.

Your responsibilities

1. Design, implement, and secure cloud infrastructure using infrastructure-as-code (IaC) tools such as Terraform or CloudFormation.
2. Embed security controls into CI/CD pipelines using tools like SonarQube, GitLab CI, and others.
3. Automate security monitoring, vulnerability assessments, and audit logging across systems.
4. Manage container security, identity and access management (IAM), secrets management, and encryption solutions.
5. Partner with engineering teams to promote secure coding practices and proactive security reviews.
6. Ensure infrastructure and processes remain compliant with frameworks such as ISO 27001, HIPAA, GDPR, and other relevant standards.

show all (8)