> Markdown version of [/jobs/ext/4720462-senior-site-reliability-engineer-secops](https://www.wearedevelopers.com/jobs/ext/4720462-senior-site-reliability-engineer-secops). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Site Reliability Engineer, SecOps

- **Company:** CMTL Companies, LLC
- **Location:** Cambridge, MA, United States (Remote available)
- **Experience:** Expert
- **Salary:** $118,300 - $147,900
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Amazon Web Services, Amazon Elastic Compute Cloud, Amazon S3, Audit Trail, Ubuntu (Operating System), Cloud Computing, Cloud Computing Security, Code Review, Cyber Security, Linux, Identity and Access Management, Python (Programming Language), Reliability Engineering, Datadog, Claude Code, AI Coding Agents, Amazon Virtual Private Cloud (VPC), Amazon Relational Database Service, Information Technology, Opsworks, Functional Programming, Drift Detection, Cloudwatch, Software Coding, Amazon Simple Queue Service (SQS), Terraform, Docker, Programming Languages
- **Published:** November 14, 2026
- **Apply:** https://www.careerbuilder.com/job-details/senior-site-reliability-engineer-secops-cambridge-ma--7b552c14-a51e-416a-b416-d02873511462

## About the Role

Reliability Engineering, Risk Management, Reliability Engineering, Artificial Intelligence (AI), Machine Tool, Amazon Web Services (AWS), Cloud Computing, Service Level Agreement (SLA), Project Tracking, Computer Security, * Bachelor's degree or equivalent years of experience and/or certification in a related field

 * 4+ years of experience working in Site Reliability Engineering or Information Technology
 * Write and review code to automate away problems within your team's domain
 * Intermediate to expert experience deploying and maintaining AWS services such as EC2, ECS, EKS, SQS, Lambda, Dynamo, RDS/Aurora, S3, and IAM
 * Intermediate to expert experience monitoring services and applications using tools such as CloudWatch Metrics, CloudWatch Logs, and Datadog, including defining and configuring alerts and SLO reports
 * Intermediate to expert experience implementing and maintaining security controls and tooling in AWS, such as IAM, KMS, Security Hub, GuardDuty, Inspector, and Config
 * Intermediate to expert coding skills in at least one programming language; we work primarily in Python
 * Intermediate to expert experience using AI coding agents (Claude Code) daily for Terraform and Python development, log and finding investigation, and remediation authoring - with the judgment to verify output and keep AI-assisted changes under standard PR and approval controls
 * Intermediate to expert experience using Infrastructure as Code platforms and CI/CD pipelines, specifically Terraform, to manage AWS infrastructure and services
 * In-depth knowledge & experience with Linux operating systems (Amazon Linux, Ubuntu) on EC2 and Docker on ECS / EKS
 * Experience partnering with security or engineering teams to implement and operationalize security requirements
 * Ability to work a hybrid schedule from our Cambridge, MA office two days per week

## Description

* Use independent judgment and discretion to implement security tooling and controls in AWS as defined by the Security Engineering team, including deployment, configuration, agent coverage, and ongoing tooling health
 * Implement IAM Roles and Policies, account-level guardrails, and secrets management in AWS in line with Security Engineering standards
 * Remediate vulnerability, cloud security posture, and compliance findings across the AWS estate, tracking work to the remediation SLAs defined by the Security Engineering team
 * Own the security telemetry pipeline - org-wide CloudTrail, GuardDuty, Security Hub, AWS Config, VPC Flow Logs, and application/audit logs - including coverage validation, retention and immutability requirements, routing into Lacework and Datadog, and managing ingest/retention cost
 * Implement and maintain preventive controls - SCPs/RCPs, permission boundaries, Config rules and conformance packs, IaC policy-as-code in CI, and secret scanning - including drift detection, auto-remediation, and a documented exception/waiver process with expiry
 * Implement network and data protection controls: security group and egress baselines, VPC segmentation, KMS key lifecycle and rotation, encryption-at-rest/in-transit standards, certificate lifecycle, and public-exposure prevention (S3 Block Public Access, IAM Access Analyzer external findings).
 * Codify everything as infrastructure-as-code using Terraform and CI/CD pipelines, enabling updates through Pull Requests with approval workflows, while also automating maintenance tasks to reduce toil
 * Provide secure-by-default Terraform modules and self-service paved paths so product teams inherit controls; consult on design reviews and threat models; act as the translation layer between Security Engineering standards and platform/application reality, feeding back where standards are impractical.
 * Participate in incident response for security events, contribute to blameless postmortems and systemic remediation, including participating in an on-call rotation
 * Complete any additional tasks as they arise