DevSecOps Engineer

About the role

The DevSecOps Engineer will implement and continuously validate security controls across A-LIGN's cloud infrastructure, CI/CD pipelines, and production applications, ensuring audit readiness and compliance.

Key responsibilities

• Design, implement and validate security controls for cloud, pipelines and applications.
• Author and maintain infrastructure‑as‑code using Terraform across all environments.
• Develop production code addressing authentication, SSO, authorization and vulnerability remediation.
• Manage identity and access solutions (OAuth 2.0, OpenID Connect, SAML, IdPs) and automate account lifecycle.
• Handle vulnerability triage, remediation and penetration‑testing response.
• Translate FedRAMP, NIST 800‑53 and other frameworks into technical controls and audit evidence.

Required profile

• Bachelor’s degree in a related field or equivalent experience.
• Minimum 4 years of experience in DevSecOps, security or cloud engineering.
• Hands‑on experience with GCP, AWS or Azure and IaC tools.
• Experience developing production software in Go, Python or TypeScript.
• Familiarity with regulated or compliance‑driven environments.

Required skills

• Terraform (or similar IaC)
• Go, Python, TypeScript
• GCP, AWS, Azure
• OAuth 2.0, OpenID Connect, SAML, JWT
• Identity and access management, containers, serverless services
• Vulnerability management and penetration‑testing remediation

What we offer

• Employer‑paid life and health insurance
• Competitive bonus structure
• Home office reimbursement and technology allowance
• Certification reimbursement and career coaching
• Generous paid time off and summer hours