Senior Security DevOps Engineer (100% remote)
DevsData LLC
Senior Security DevOps Engineer (100% remote)
Salary: 7000-8000 USD/Month
100% remote
Full-time
B2B
We're looking for a Senior Security DevOps Engineer to join a fast-growing fintech company that builds a digital trading and investment platform.
Requirements:
8+ years of experience in DevOps, Cloud Security, Site Reliability Engineering, or similar roles.
Experience working with high-traffic systems or regulated environments, such as financial platforms or other compliance-driven industries.
Strong understanding of cloud identity systems and modern authentication protocols.
Advanced knowledge of Kubernetes security, container orchestration, and cluster hardening.
Hands-on experience with Infrastructure as Code tools such as Terraform or Ansible.
Solid understanding of Linux security mechanisms and networking fundamentals, including TCP/IP, DNS, and TLS.
Experience implementing security automation within CI/CD pipelines.
Nice to Have:
Experience supporting security or financial compliance frameworks (e.g., SOC 2, ISO 27001, or similar).
Background in cryptography concepts, including encryption standards or PKI management.
Experience with resilience or security testing approaches, such as controlled failure or attack simulations.
Key Responsibilities:
Design and maintain secure identity and access management (IAM) strategies across cloud infrastructure, Kubernetes clusters, and internal platforms using RBAC and ABAC models.
Implement privileged access management solutions to enable secure, temporary access to production environments while eliminating long-lived credentials.
Enforce strong authentication and identity policies, including MFA, SSO integrations, and modern identity standards such as OIDC and SAML.
Secure containerized environments by implementing Kubernetes security best practices, including network policies, workload isolation, and secure container lifecycle management.
Develop and maintain network security architecture, including segmentation strategies, firewall configurations, and protection mechanisms for high-throughput APIs.
Manage the lifecycle of secrets and sensitive credentials, ensuring secure storage, rotation, and access control across environments.
Integrate security scanning and testing tools into CI/CD pipelines to detect vulnerabilities during development and deployment stages.
Integrate security monitoring with observability tools to detect anomalies, threats, or unauthorized access attempts in real time.
Promote Security as Code practices by automating security policies, checks, and infrastructure configurations.
Get to know DevsData:
We are a technology consulting company and a recruitment agency, delivering software solutions to clients from Europe and the US. We work 100% remotely, in an international team, including people from Asia, London, or San Francisco. We employ people with experience in international corporations as well as students of the best technical and business universities.
Find out more: https://devsdata.com/