Senior DevSecOps Engineer

Senior Dev Sec Ops  Engineer

About us

Hyperproof is on a mission to transform the Governance, Risk, and Compliance (GRC) world with a powerful new software platform.  With Hyperproof, companies can save time and money while also operating their programs at a much higher level of effectiveness and accountability.  We envision a world where organizations we depend on are truly trustworthy - and Hyperproof is the platform that will get them there.

We have a great team and culture - picture yourself in a highly collaborative startup environment where you can make a real impact on something truly important. It's an exciting time to be at Hyperproof; we raised our Series B round in 2023, validating our teamwork and company vision, and we continue to grow rapidly.

As we continue to grow, we are seeking a talented Senior Dev Sec Ops  Engineer to join our team and lead our efforts in supporting our multi-region, FedRAMP-authorized infrastructure.

WHO YOU ARE:

You are a seasoned Senior Dev Sec Ops  Engineer with a passion for ensuring the reliability, scalability, and security of cloud-based infrastructure. You thrive in dynamic environments and possess a deep understanding of Azure technologies. Your expertise in Dev Ops methodologies and security practices, and federal compliance standards makes you an invaluable asset to any team.

You excel at collaborating with cross-functional teams and are dedicated to driving innovation and continuous improvement. You understand that compliance and developer velocity are not opposing forces - and you know how to architect systems that deliver both.

WHAT YOU WILL DO:

As a Senior Dev Sec Ops  Engineer, you will lead the management and optimization of Hyperproof's Azure-based infrastructure across commercial and FedRAMP regions. Your responsibilities will include:

* Develop and execute Dev Ops strategy tailored to all Hyperproof regions, including our FedRAMP-authorized environments.

* Own and evolve our Terraform/Terragrunt IaC pipeline for multi-subscription promotion, including continuous monitoring

* Architect secure, scalable platform infrastructure including Git Hub Actions, Git Lab, and ADO CI/CD pipelines with security gates, Kubernetes environments, observability systems, and compliance automation that enables developer  velocity while maintaining continuous compliance posture.

* Support FedRAMP authorization activities: contribute to SSP documentation, NIST 800-53  control implementations, 3

PAO coordination, and readiness assessments while establishing  repeatable processes.

* Lead the design and security implementation of our Seattle-based on-premise build/test platform. You will ensure that physical hardware configurations (firmware, networking, and storage layout) maintain parity with our Azure Kubernetes Service (AKS) patterns while meeting strict SOC 2 compliance standards for local developer workflows.

* Establish security and compliance architecture patterns across encryption, network  segmentation, secrets management, supply chain security, and incident response.

* Drive technical decisions and technology selection for cloud platforms, compliance tooling, and security controls.

* Mentor and raise the technical bar across engineering teams through architecture reviews,  design discussions, and establishing FedRAMP best practices.

* Partner with security, product, and business leadership to translate federal customer  requirements into technical architecture and deliver measurable improvements in security  posture and operational efficiency.

* Monitor, triage, and remediate CVEs and security vulnerabilities across infrastructure,  container images, and dependencies - maintaining compliance with FedRAMP continuous monitoring requirements.

WHAT YOU WILL BRING:

Required:

* U.S. citizenship, residing and working from within the United States.
* * BS in Computer Science, Engineering, or a related field (or equivalent  experience).

* 5+ years of extensive experience in SRE, Dev Sec Ops  or Platform engineering roles, with a focus on managing  Azure-based infrastructure.

* Demonstrated knowledge and interest in applying AI technologies towards fully or partially automating…