DevOps Engineer

We are seeking a Cloud Security & CI/CD Engineer to support the security, governance, and ongoing management of cloud-based development pipelines. This individual will be responsible for auditing CI/CD environments, ensuring security best practices are followed, managing cloud identity and access controls, and remediating findings generated by security tooling. Key Responsibilities Audit and maintain GitHub/GitLab CI/CD pipelines to ensure secure configurations and adherence to best practices. Review pipelines for potential exposure of secrets, tokens, credentials, and sensitive information. Document audit findings, remediation recommendations, and security standards. Implement and enforce least-privilege access controls across cloud resources and CI/CD environments. Manage secrets, credentials, and IAM policies within AWS environments. Remediate security findings generated through Wiz and other cloud security tools. Support AWS services including S3, Lambda, and Bedrock, with a focus on security and identity management. Assist with Infrastructure as Code (Terraform preferred) when cloud resources require provisioning or modification. Partner with engineering teams to improve pipeline security, testing practices, and overall cloud governance. Balance responsibilities across cloud security, observability, and monitoring initiatives as business needs evolve.

Experience with GitHub and/or GitLab CI/CD pipelines. Strong understanding of pipeline syntax, testing frameworks, and CI/CD security best practices. Experience managing secrets, tokens, credentials, and access controls. Hands-on experience with AWS cloud environments. Knowledge of IAM (Identity & Access Management) and least-privilege security models. Proficiency in Python and/or JavaScript. Experience with security scanning and vulnerability management tools. Strong technical documentation and auditing experience. Experience with Wiz or similar cloud security platforms. Knowledge of Terraform and Infrastructure as Code practices. Experience supporting cloud monitoring and observability initiatives. Familiarity with GCP environments. Nice-to-Have Technologies AWS S3 AWS Lambda AWS Bedrock Terraform Wiz GitHub Actions GitLab CI/CD