Senior DevSecOps Engineer

Required

• Production Terraform or OpenTofu: reusable modules, state management, imports and refactors, and careful plan review
• Proficiency in Python and/or Go, plus shell scripting
• Clear, concise technical writing
• Deep hands-on AWS experience in a multi-account organization: IAM policy evaluation, Organizations and service control policies, and Identity Center or equivalent federation with an external IDP
• Cloud networking you can debug under pressure: VPC design, Transit Gateway routing and segmentation, firewalls and inspection, DNS, PrivateLink, and site-to-site VPN with BGP; you can answer “why can’t X talk to Y” across accounts
• CI/CD and container supply chain experience, including image builds, signing and verification, secrets management, and vulnerability scanning
• Hands-on experience running access to a hosted model service (Amazon Bedrock, Azure OpenAI, Vertex AI, or similar) or an LLM gateway
• Experience with AI coding agents (Claude Code or equivalent), with a working understanding of its risks: prompt injection, excessive agency, token and secret exposure, and untrusted tool servers
• Desired Skills and Experience
• AWS GovCloud experience, or work inside FedRAMP, NIST SP 800-171, CMMC, or ITAR-controlled environments
• Greenfield landing-zone or account-vending work, including AWS Network Firewall and IPAM
• Private PKI (for example AWS Private CA), HSM-backed key management, and mTLS