DevOps Engineer

Role overview

Ciphertext Solutions is seeking a DevSecOps Engineer to secure, automate, and operate the infrastructure and software delivery pipelines for its fintech platform. The role combines cloud infrastructure, secure software delivery, security engineering, and compliance support in a regulated, audit- and uptime-sensitive environment.

Responsibilities

Cloud infrastructure & platform security

• Design, implement, and maintain secure infrastructure in Google Cloud Platform (GCP).
• Manage infrastructure with Infrastructure as Code (IaC), primarily using Terraform.
• Strengthen network security controls (firewalls, routing, segmentation, VPNs, and secure partner connectivity).
• Support certificate lifecycle management and secrets handling, including secure configuration across environments.
• Improve environment consistency, hardening, and operational resilience with engineering teams.

DevSecOps & secure software delivery

• Embed security practices across the software development lifecycle (design through deployment and operations).
• Improve and maintain CI/CD pipelines for secure build/release, automated checks, and reliable deployments.
• Implement secure guardrails (secure coding practices), dependency management, and practical application security controls aligned with OWASP.
• Support threat modeling, security reviews, and remediation planning with developers.
• Develop automation to increase delivery quality, repeatability, and auditability.

Monitoring, detection & incident response

• Monitor systems and security tooling to detect vulnerabilities, suspicious activity, misconfigurations, and operational risks.
• Investigate, document, and help remediate security incidents and operational issues.
• Perform root-cause analysis and post-incident improvements to prevent repeat issues.
• Participate in on-call / after-hours response for urgent security or infrastructure issues.

Compliance, risk & documentation

• Support SOC 2 and PCI DSS initiatives and internal control requirements.
• Maintain policies, procedures, technical documentation, and operational runbooks.
• Assist with evidence collection, control validation, and remediation tracking for audits/certifications.
• Perform risk assessments, security reviews, and infrastructure audits as needed.

Collaboration & enablement

• Partner with software engineers, product stakeholders, and leadership to align security and infrastructure improvements with business priorities.
• Educate teammates on sec