Senior DevSecOps Engineer; Remote

Position Description

IDS is currently searching for a Dev Sec Ops  Engineer with deep expertise in AWS cloud infrastructure, containerization, and security automation. You will be responsible for architecting and implementing secure CI/CD pipelines, managing Kubernetes clusters, deploying infrastructure as code using Terraform/Open Tofu, and embedding security controls throughout the software development lifecycle. The ideal candidate is a proactive problem solver who balances security requirements with operational efficiency and development velocity.

The candidate will have opportunities to expand their skill set by working with emerging security tools, implementing compliance‑as‑code frameworks, and collaborating across development, operations, and security teams to build resilient, secure systems.

• 3+ years of experience in AWS cloud services (EC2, ECS/EKS, S3, Lambda, RDS, ALB, VPC, IAM) is required
• 3+ years of experience in Container technologies (Docker and/or Podman) is required
• 3+ years of experience in CI/CD pipelines (Jenkins, Git Lab CI, Git Hub Actions, or similar) is required
• 3+ years of experience in Git version control and branching strategies is required
• 2+ years of experience in Infrastructure as Code (Terraform and/or Open Tofu) is required
• 2+ years of experience in Kubernetes orchestration (deployment, scaling, monitoring, troubleshooting) is required
• 2+ years of experience in Configuration management (Ansible, Chef, or Puppet) is preferred
• 2+ years of experience in Monitoring and observability (Prometheus, Grafana, ELK stack, Cloud Watch) is preferred

• 3+ years of experience in Dev Sec Ops  practices (security automation, shift-left security) is required
• 2+ years of experience in Container security scanning (Trivy, Aqua, Twistlock, Anchore, or similar) is required
• 2+ years of experience in Static/Dynamic Application Security Testing (SAST/DAST tools like Sonar Qube, Checkmarx, OWASP ZAP) is required
• 2+ years of experience in Integrating security gates into CI/CD pipelines is required
• 2+ years of experience in Secrets management (Vault, AWS Secrets Manager, or similar) is required
• 2+ years of experience in Vulnerability management and remediation workflows is required
• 1+ years of experience in Software Composition Analysis for dependency scanning (Trivy, Snyk, or similar) is preferred
• 2+ years of experience in Security compliance frameworks (NIST, STIG, CIS benchmarks, FedRAMP) is required
• 2+ years of experience in Security hardening and baseline configuration is required
• 2+ years of experience in Audit logging and security event monitoring is required

• 2+ years of experience in Identity and Access Management (IAM policies, RBAC) is required
• 2+ years of experience in Network security (security groups, NACLs, WAF, network segmentation) is required
• 1+ years of experience in Certificate management and PKI is required
• 2+ years of experience in Security code review practices is preferred
• 2+ years of experience in Container and Kubernetes security (Pod Security Standards, Network Policies, image signing) is preferred

• 2+ years of experience in API gateway management is preferred
• 1+ years of experience in ETL platforms (Talend and/or Apigee) is preferred

• 3+ years of experience in Scripting languages (Python, Bash, or Go) is required
• 3+ years of experience in YAML/JSON configuration is required

• Must have security mindset and risk assessment thinking
• Must have strong problem-solving and troubleshooting abilities
• Must be able to balance security requirements with development velocity
• Cross-functional collaboration with development and operations teams is required
• Documentation and knowledge sharing is required
• Communication of security risks to technical and non-technical stakeholders is required
• Incident response and on-call readiness is required
• Staying current with emerging security threats and vulnerabilities is required

• This position requires a minimum of a Bachelor's degree from an accredited college or university in Engineering, Information Technology, Computer…