> Markdown version of [/jobs/ext/186483-web-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/186483-web-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Web Application Security Engineer

- **Company:** OpenKyber LLC
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Salary:** $114,400.0 - $135,200.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Amazon Elastic Compute Cloud, Amazon S3, Audit Trail, Continuous Integration, Amazon DynamoDB, Github, Identity and Access Management, OpenID, Role-Based Access Control, Web Application Security, Systems Integration, Management of Software Versions, Data Logging, Autoscaling, Amazon Virtual Private Cloud (VPC), Cloudwatch, Rundeck, Terraform, Software Version Control
- **Published:** May 13, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=bdc7ddd8dc36282e

## About the Role

Do you have experience in Version control?, Do you have a Bachelor's degree?, qualifications: Infrastructure as Code (Terraform) 5+ years of hands?on Terraform experience in production AWS environments. Advanced experience with: Module design, reuse, and versioning Remote state using S3 and DynamoDB Multi?account and multi?environment deployments Standards enforcement via validation and lifecycle rules Experience supporting centralized Terraform modules consumed by many teams. AWS Cloud Expertise Strong, practical experience with: AWS Organizations, SCPs, and multi?account strategies Cross?account IAM role design Account bootstrap / landing zone concepts Hands?on experience provisioning AWS services via Terraform, including: IAM VPC and networking EC2 / Auto Scaling EKS or ECS (working knowledge) S3, RDS CloudWatch and logging KMS and encryption Spacelift (Terraform Orchestration) Production experience using Spacelift for Terraform: Stack and dependency design Environment promotion and approvals Worker configuration (private or AWS?hosted preferred) Drift detection
and scheduled runs Experience integrating Spacelift with AWS IAM and GitHub workflows. Rundeck (Operational Automation) Experience designing and operating Rundeck jobs for AWS infrastructure operations. Strong understanding of: Job security, RBAC, and approvals Credential management using IAM roles (no static keys) Error handling, retries, and notifications Familiarity with job?as?code or version?controlled job patterns. GitHub & CI/CD Enterprise GitHub experience, including: Branch protection rules and CODEOWNERS Required reviews and PR?based change control GitHub Actions for CI/CD OIDC?based authentication to AWS Strong understanding of GitOps delivery models. Security & Compliance Experience implementing: Least?privilege IAM and permission boundaries Secure secrets handling (no credentials in code) Approval workflows and separation of duties Ability to embed security and compliance into IaC pipelines rather than manual processes. Experience in regulated or risk?sensitive environments
strongly preferred. Operational & Collaboration Skills Strong troubleshooting and operational mindset. Experience supporting shared platforms used by many teams. Ability to document solutions clearly and enable team adoption. Strong communication skills and comfort working with cross?functional stakeholders.

## Description

responsibilities: Design, build, and maintain Terraform modules and IaC patterns used by multiple delivery teams. Implement and operate Terraform deployments via Spacelift, including stack design, approvals, drift detection, and environment promotion. Develop and maintain Rundeck jobs for AWS operational automation, break?glass actions, and platform support workflows. Build and support GitHub?based CI/CD pipelines using GitOps principles (PR?driven change control). Establish and enforce AWS standards for: Account structure and environments Tagging, cost allocation, and ownership Security, access control, and auditability Implement secure automation using IAM roles, OIDC, and least?privilege access. Collaborate with application and platform teams to onboard workloads to standardized IaC tooling. Produce and maintain documentation, runbooks, and onboarding guides. Troubleshoot IaC, pipeline, and automation failures; participate in root cause analysis as needed.


## Related Videos

- [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next)
- [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect)
- [Remote Driving on Plant Grounds with State-of-the-Art Cloud Technologies](https://www.wearedevelopers.com/videos/251-remote-driving-on-plant-grounds-with-state-of-the-art-cloud-technologies)
- [CI/CD with Github Actions](https://www.wearedevelopers.com/videos/856-ci-cd-with-github-actions)
- [Bringing AI Model Testing and Prompt Management to Your Codebase with GitHub Models](https://www.wearedevelopers.com/videos/1536-bringing-ai-model-testing-and-prompt-management-to-your-codebase-with-github-models)
- [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security)

## Related Articles

- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)