Senior DevOps Security Lead
Listed on 2026-07-25
-
IT/Tech
Cybersecurity
You are a proactive leader, always looking for opportunities for improvement. You love to build solid foundations and ensure uptime and reliability, as well as protection from vulnerability, are well managed. You are comfortable to lead projects and take ownership of systems and processes. You’re ready to take on AWS cloud infrastructure, CI/CD, release engineering, and observability, and own the information security program and the SOC 2 compliance effort.
In this seat, you’ll concentrate on elevated infrastructure access with security oversight, you’ll operate under explicit compensating controls that preserve segregation of duties and have the opportunity to lead in maturing our Dev Ops and security posture.
Operating for over 30 years, Lift Net is a pioneer and leader in vertical transportation performance monitoring and management. We are the unbiased Source of Truth in vertical transportation management. Our platform connects, controls, and monitors elevators, escalators, and moving walks for building operators across enterprise, transit, healthcare, and government environments. Accessible from any device, our customers can access real-time analytics and reporting on their vertical transportation portfolio, regardless of geographic location or distribution.
We are scaling the platform, the team, and the enterprise customer base as an independent division within Kings III of America. Real-World Experience. Futureproof Innovation.
What You’ll Do- Own CI/CD pipelines and release engineering across all environments (Dev/QA/Staging/Production/Demo/Multi-Region).
- Own cloud infrastructure-as-code (reliability, scaling, and cost optimization on AWS).
- Own the observability/monitoring stack, on-call alerting, and incident response.
- Implement and operate change management for production deployments.
- Own the information security program, policies, and the SOC 2 control set and evidence.
- Govern identity and access management (IAM) - provisioning standards, least privilege, and MFA enforcement.
- Run quarterly access reviews/recertification across all in-scope systems.
- Own vendor/third-party security risk assessment and review.
- Manage the SOC 2 auditor relationship and readiness milestones.
- Manage AWS Cognito identity integration, backups, and disaster-recovery procedures.
- Monitor platform uptime percentage (target 99.9%).
- Own deployment frequency and change-failure rate; mean time to recovery (MTTR).
- Manage infrastructure cost as a percentage of ARR.
- SOC 2 Type 1 readiness milestones delivered on schedule.
- Quarterly access reviews completed on time, exceptions remediated.
- Mean time to revoke access on offboarding (target = 1 business day).
- Security incident count and time-to-contain.
- Bachelor's degree or equivalent experience; AWS or Security credentials a plus.
- 8+ years across Dev Ops/SRE/platform engineering AND information security, with senior-level AWS depth.
- Direct ownership of a SOC 2 (or ISO 27001) program, including auditor relationship and evidence.
- Strong infrastructure-as-code (Terraform / Cloud Formation), CI/CD, and containerization experience.
- Strong IAM and cloud-security depth - identity federation, access governance, and hardening.
- Hands-on observability and production incident response.
- Deep, hands-on Linux expertise - operating, debugging, and hardening Linux hosts from the command line (systemd, networking, bash scripting, log analysis); the edge devices (Raspberry Pi) and the AWS EC2 services run on Linux.
- Working Rust proficiency - able to build, package, deploy, and troubleshoot the Rust backend / VTS (including ARM / edge cross-compilation) and to own its CI/CD and release pipelines.
- Pragmatic for a small, fast-moving company - risk-based, automation-first, low ego; communicates bottom-line-first.
Our mission is simple – We provide telemetry and control services to help organizations manage their vertical transportation and guest experience.
Our Core Values Are Even Simpler- Honesty & Integrity
- Service to the customer above all else
- Do what is right
- Good enough is not good enough: pursue excellence
- Encourage individual initiative and growth
By living and breathing our…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).