Mid-Level DevSecOps Engineer – Remote

About the role

Smart Education LLC is seeking a Mid‑Level DevSecOps Engineer to design, build and secure its cloud‑native infrastructure. The role is fully remote and focuses on embedding security throughout the software delivery lifecycle while keeping CI/CD pipelines fast and reliable.

Key responsibilities

• Design, deploy and maintain scalable infrastructure on AWS and/or GCP following well‑architected framework principles.
• Write and manage Infrastructure as Code using Terraform, CloudFormation or Pulumi.
• Operate Kubernetes clusters (EKS, GKE, AKS), handling networking, autoscaling and resource policies.
• Build end‑to‑end CI/CD pipelines with Jenkins, GitHub Actions or GitLab CI and integrate security gates.
• Develop automation scripts in Python and Bash for provisioning, configuration management, secret rotation and incident response.
• Integrate SAST, DAST, SCA and container scanning tools (SonarQube, Trivy, Snyk, OWASP ZAP) into pipelines.
• Implement RBAC, network policies, pod security standards and secrets management (Vault, Sealed Secrets, cloud‑native KMS).
• Deploy monitoring, logging and alerting stacks (Prometheus, Grafana, ELK/EFK, Datadog, Dynatrace, New Relic) and define SLOs/SLIs.
• Collaborate with development teams to adopt DevSecOps best practices and maintain up‑to‑date runbooks and architecture diagrams.

Required profile

• 3–5 years of experience in cloud infrastructure, DevOps and security engineering.
• Hands‑on experience with AWS or GCP and container orchestration platforms.
• Proven ability to embed security controls early in the development lifecycle.

Required skills

• AWS, GCP
• Terraform, CloudFormation, Pulumi
• Kubernetes (EKS, GKE, AKS)
• Jenkins, GitHub Actions, GitLab CI
• Python, Bash
• Vault, Sealed Secrets, cloud‑native KMS
• SonarQube, Trivy, Snyk, OWASP ZAP
• Harbor, ECR, GCR
• Prometheus, Grafana, ELK/EFK, Datadog, Dynatrace, New Relic
• PostgreSQL