{"id":860060,"url":"https://alion.io/job/marinomanagement-senior-devsecops-engineer","title":"Senior DevSecOps Engineer","company":{"id":679015,"name":"Dalio Family Office","domain":"marinomanagement.com","url":"https://alion.io/company/marinomanagement","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":95,"open_postings":3,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":84,"computed_at":"2026-11-08T05:47:12Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":170000,"max":230000,"currency":"USD","period":"year","gross":null,"usd_annual":230000},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon EKS","optional":false},{"name":"AWS","optional":false},{"name":"AWS Bedrock","optional":false},{"name":"Azure","optional":false},{"name":"Azure AKS","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Bash","optional":false},{"name":"Bicep","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"DLP","optional":false},{"name":"GitLab","optional":false},{"name":"JavaScript","optional":false},{"name":"JFrog Artifactory","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"OWASP","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Ray","optional":false},{"name":"React.js","optional":false},{"name":"Terraform","optional":false},{"name":"Vault","optional":false},{"name":"vLLM","optional":false}],"status":"live","first_seen_at":"2026-08-12T19:33:37Z","employer_posted_date":"2026-10-09","last_verified_at":"2026-11-08T17:37:14Z","board_verified":true,"closed_at":null,"days_open":88,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":88},"description":"Senior DevSecOps Engineer\nDalio Family Office\nDalio Family Office Overview: \nThe Dalio Family Office (DFO) supports Barbara and Ray Dalio and their family in their ventures, investments, and philanthropic efforts under Dalio Philanthropies, which includes OceanX, Dalio Education, Endless Network, and the Beijing Dalio Foundation. The core of the DFO’s culture is built around meaningful work and meaningful relationships and the family’s commitment to giving back. The office is headquartered in Westport, CT with regional offices in New York City, Singapore, and Abu Dhabi. This is a hybrid position reporting primarily out of our New York City office location.\nPosition Summary: \nReporting to the Cybersecurity Lead, the Senior DevSecOps Engineer will design, deploy, and secure scalable AWS + Azure environments with a strong focus on Infrastructure as Code (IaC). The purpose of this role is to build secure cloud-native infrastructure from the ground up, operationalize AWS/Azure services, and automate the reliability and security of mission-critical systems. You will embed security-by-design across the SDLC by implementing secure CI/CD pipelines with automated testing, policy controls, and supply-chain protections (SBOMs, signed artifacts, provenance), while centralizing security telemetry into Microsoft Defender for Cloud for unified posture management, threat detection, and compliance. The role also secures cloud infrastructure, data, and key management using AWS KMS and Azure Key Vault, hardens AKS/EKS with policy-as-code (OPA/Gatekeeper) and runtime protections, and extends these controls to AI/LLM development and inference platforms including AWS Bedrock, AI Foundry, and vLLM.\nDay-to-day responsibilities would include a combination of the following:\nEmbed security-by-design across the SDLC with automated controls and measurable security outcomes.\nDeliver a secure, compliant AWS/Azure cloud foundation with strong data protection and key management.\nHarden container and Kubernetes platforms with consistent policy enforcement and runtime protection.\nBuild and maintain secure CI/CD pipelines with SAST/SCA, IaC + container scanning, secret detection, and policy gates, including threat modelling and secure design practices.\nEnforce software supply-chain security (SBOMs, signed images, provenance verification) and route pipeline/code telemetry into Microsoft Defender for Cloud.\nSecure AWS/Azure workloads across identity, network, compute, and storage; implement encryption, classification, retention, DLP, and safe logging.\nOperate AWS KMS / Azure Key Vault (rotation, auditing, envelope encryption) and use Defender for Cloud for CSPM/CWPP, threat detection, and compliance.\nHarden AKS/EKS using pod security, OPA/Gatekeeper, network policies, secrets management, and runtime protections; govern artifacts via JFrog Artifactory (trust, allow/deny, immutability) and integrate Kubernetes signals into Defender for Cloud.\nAdditional duties as assigned.\nThe ideal candidate will possess the following knowledge, skills, attributes, and values:\nSecurity minded with the utmost regard for confidentiality and discretion.\nCollaborative and helpful by nature.\nStrong sense of ownership in one’s work.\nExcellent communication and synthesis skills.\nDemonstrated track record supporting mission-critical workloads end-to-end: secure deployments, hardening, centralized logging/telemetry, compliance, and continuous optimization.\nFamiliarity with cloud governance and security tooling including Microsoft Defender for Cloud, AWS SCPs/RCPs, Azure Policy, and OPA/Gatekeeper.\nIllustrative Benefits: \n100% company paid medical premiums\n17 company paid holidays\nFriday summer hours\nMonthly community happy hours\nHybrid work environment\nFree catered food services for in-office days\nGenerous PTO offering \nCasual dress code\n150% 401(k) match up to $7,500 and 100% match above $7,500 ($15k match limit)\nGym reimbursement, back up childcare services, insurance, financial, and legal services, and much more!\nQualifications:\nBachelor’s Degree or Diploma in Cybersecurity, Computer Science, Information Technology, or related discipline.\n7+ years of experience in DevSecOps / Cloud Engineering delivering and securing production AWS and Azure environments, including cloud security architecture and operations.\nAt least 3 years hands-on experience operating enterprise-scale platforms (systems engineering/administration), including reliability engineering, monitoring/telemetry, and incident response.\nAdvanced IaC expertise with Terraform (plus CloudFormation/Bicep preferred), building standardized, governed cloud foundations (landing zones, guardrails, automation).\nProven experience building and securing CI/CD automation using GitLab and/or Azure DevOps, including automated security testing and supply-chain controls (SBOMs, artifact signing, provenance).\nStrong Kubernetes security experience with AKS/EKS, including policy enforcement and runtime protections.\nExpertise in cryptographic key management and data protection, including AWS KMS / Azure Key Vault, encryption, and data security controls.\nExperience securing AI/LLM systems and inference platforms (AI Foundry, AWS Bedrock, vLLM), including knowledge of OWASP LLM Top 10 and LLM guardrails.\nStrong proficiency across Linux and Microsoft ecosystems (identity, hardening, patching, operational best practices) and scripting with Python/Bash/PowerShell (application languages such as Java/.NET/JavaScript (React.js) are a plus).\n\nCompensation:\nCompensation for the role includes a competitive salary in the range from $170,000 -$230,000 (inclusive of a merit-based bonus, dependent on years of experience, level of education obtained, as well as applicable skillset) and an excellent benefits package, including a comprehensive employer paid medical plan and generous employer match for 401k. \nPlease note we are unable to provide immigration sponsorship for this position.\nUse of AI in the Application Process:\nWe recognize that candidates may use AI-enabled tools to assist with resume drafting, application preparation, and interview preparation. Such use is permitted provided all submitted materials accurately reflect the candidate's own qualifications, experience, skills, and work history.\nCandidates may not submit hidden instructions, embedded prompts, misleading metadata, deceptive content, code, or other materials intended to interfere with or improperly influence the Company's recruiting process or the administration of candidate applications\nAny attempt to misrepresent qualifications or improperly interfere with the recruiting process may result in disqualification from consideration.\nAt the DFO, we believe our biggest asset is our people. We are proud to be an equal opportunity employer, hiring and developing individuals from diverse backgrounds and experiences to add to our collaborative culture. The DFO treats all candidates and employees with respect and does not discriminate in our recruiting, hiring, and promoting processes and general treatment during employment, including on the basis of actual or perceived race, creed, color, religion, sex, age, sexual orientation, gender identity and/or expression, alienage or national origin, ancestry, citizenship status, marital status, veteran status, or disability.","description_format":"text","description_chars":7329,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan","Hybrid work"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Family Offices"],"lifecycle":[{"event":"open","at":"2026-09-13T09:29:48Z"}],"visa":[],"liveness":{"score":35,"band":"fade","label":"Fading","p_open":1,"p_active":0.791,"p_room":0.44,"age_days":87,"expected_fill_days":84,"reasons":["conf:0","win:tail","crowd:"],"computed_at":"2026-11-08T05:47:12Z"},"pay":{"stated_usd_annual":230000,"is_top_pay":true},"html_url":"https://alion.io/job/marinomanagement-senior-devsecops-engineer","json_url":"https://alion.io/job/marinomanagement-senior-devsecops-engineer.json","meta":{"generated_at":"2026-11-08T20:40:27Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":43203,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":679015},"rest":"https://alion.io/mcp/rest/get_company?id=679015"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmarinomanagement-senior-devsecops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmarinomanagement-senior-devsecops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmarinomanagement-senior-devsecops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/marinomanagement-senior-devsecops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmarinomanagement-senior-devsecops-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":860060}},{"tool":"search_jobs","arguments":{"company":"marinomanagement.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":860060},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}