Overview
Senior Cloud DevSecOps (Cloud SecOps) Engineer role bridging Cloud Operations and Security Engineering in a high-scale, multi-tenant environment, building automated systems to securely onboard, monitor and patch many client environments at once.
What you'll do
- Manage and secure cloud infrastructure across diverse client environments (AWS, Azure, GCP), ensuring strict data isolation and network segregation.
- Build "Zero-Touch" pipelines using Infrastructure as Code (IaC) to provision security baselines (SIEM forwarders, scanners, IAM roles) for new customers in minutes.
- Design strategies to patch and update security agents across hundreds of servers/endpoints without causing downtime for clients.
- Maintain the central "Single Pane of Glass" platform that aggregates alerts and health metrics from all customer tenants into the SOC.
- Act as the Tier-3 escalation point for the SOC, investigating complex cloud infrastructure attacks or misconfigurations.
What you'll need
- Deep hands-on experience with at least two major cloud providers (AWS / Azure / GCP) and their native security tools (GuardDuty, Sentinel, Security Hub).
- Expert in writing modular templates (e.g., Terraform, CloudFormation) that can be reused across different clients with variable inputs.
- Strong knowledge of Kubernetes operations, including securing clusters, managing namespaces for isolation, and enforcing policies.
- Proficiency in Python or Go to automate cross-account tasks (e.g., "Rotate access keys for these 50 client accounts").
- Understanding of how to implement technical controls for standards like SOC2, ISO 27001, or HIPAA in a cloud environment.
- 5–10 years of experience.
- Excellent written and oral communication skills.
Nice to have
- Prior experience working at a Managed Service Provider or handling multi-customer setups (e.g., using Azure Lighthouse).
- Experience with tools like OPA (Open Policy Agent) or Checkov to prevent misconfigurations before deployment.
- Certifications: Certified Kubernetes Security Specialist (CKS), AWS Security Specialty, or Azure Security Engineer.
Details
- Fast-paced environment handling multiple demands; requires a high level of initiative and independence and appropriate judgment.
- Requires the ability to use a personal computer for extended periods of time.
- May be required to perform duties outside normal responsibilities from time to time, as needed.
Read the full description and apply on the company’s own careers page.