DevSecOps Engineer

About the role

The DevSecOps Engineer will execute security engineering activities across A‑LIGN’s cloud infrastructure, CI/CD pipelines, and production applications. You will implement and continuously validate security controls, deliver infrastructure improvements, and support continuous audit readiness in a fast‑paced environment.

Key responsibilities

• Design, implement and continuously validate security controls across cloud infrastructure, CI/CD pipelines and production applications.
• Author and maintain infrastructure‑as‑code using Terraform (or similar) for QA, staging and production.
• Deliver production code addressing authentication, SSO, authorization, session security and vulnerability remediation.
• Design and administer IAM solutions (OAuth 2.0, OpenID Connect, SAML, identity providers, account lifecycle automation).
• Manage vulnerability remediation from triage through closure using static and dynamic scanning, dependency and container tools.
• Remediate penetration‑testing findings and prepare evidence‑based technical responses.
• Translate FedRAMP, NIST 800‑53 and other framework requirements into deployed technical controls and repeatable audit evidence.
• Develop automation for security operations, evidence collection and AI‑assisted workflows.

Required profile

• Bachelor’s degree in information systems, cybersecurity, computer science, engineering or related field, or equivalent experience.
• At least 4 years of experience in DevSecOps, security engineering, cloud engineering or software engineering.
• Hands‑on experience with GCP, AWS or Azure, including IAM, containers or serverless, build pipelines and secrets management.
• Experience developing production software in Go, Python or TypeScript.
• Experience using Terraform (or similar IaC) in production environments.

Required skills

• Terraform (or comparable IaC tool)
• Go, Python, TypeScript
• GCP, AWS, Azure
• OAuth 2.0, OpenID Connect, SAML, JSON Web Tokens, identity provider administration
• Vulnerability management and penetration‑testing remediation
• Scripting/automation with Python, shell, SQL
• Familiarity with FedRAMP, NIST 800‑53, SOC 2, ISO 27001, FIPS 140‑2

What we offer

• Employer‑paid life and health insurance
• Competitive bonus structure
• Home office reimbursement and technology allowance
• Certification reimbursement and loyalty discount program
• Personalized career coaching and generous paid time off