DevSecOps Engineer III

Role Overview

DevSecOps Engineer III (Remote candidates considered) will strengthen and scale secure digital asset infrastructure. The role focuses on automating security controls, improving CI/CD and delivery workflows, and building cloud-native systems that support both proprietary applications and critical third-party integrations.

Responsibilities

• Harden and modernize the GitHub ecosystem: consolidate organizations, implement guardrails and RBAC best practices, and establish policy-as-code governance at scale.
• Assess and evolve CI/CD posture: modernize pipelines, evaluate tooling, and drive toward fully automated secure delivery.
• Implement SSDF practices to embed secure-by-design principles across the SDLC, ensuring supply chain integrity from commit to production.
• Act as an SRE for new application infrastructure: build observability, proactive reliability patterns, performance scaling strategy, and operational readiness.
• Design, manage, and automate cloud infrastructure using infrastructure-as-code, including container and container orchestration where applicable, aligned to NIST CSF 2.0, least-privilege, and zero-trust models.
• Develop and integrate ITSM operational workflows with automation and process maturity to align engineering velocity with audit requirements.

Requirements

• Experience leading DevSecOps initiatives spanning CI/CD, identity/access controls, secrets management, and security observability.
• Strong background applying secure SDLC concepts (including SSDF) and supply chain security.
• Ability to build and operate cloud-native infrastructure with observability and reliability practices.

Nice-to-Haves

• Familiarity with policy-as-code governance and modernization of GitHub org/security controls.
• Alignment with NIST CSF 2.0, least-privilege, and zero-trust security models.
• Hands-on experience with infrastructure automation and container orchestration.

Location/Work Model

• Remote candidates considered (United States).