AWS DevSecOps Engineer

Stellenbeschreibung:

Design, implement, and maintain secure CI/CD pipelines on AWS for a SaaS platform integrating IoT hardware with a resident-facing mobile app and property management dashboard
Implement infrastructure-as-code using Terraform/CloudFormation with security best practices
Own container security, image scanning, and vulnerability management across the AWS environment
Manage identity and access controls, secrets management, and network security
Build and maintain monitoring, logging, and alerting for proactive threat detection
Support SOC 2 and compliance efforts for iApartments' AICPA SOC posture and multifamily enterprise clients
Collaborate with development teams to embed security into the SDLC
Document existing offshore-built systems and processes to support knowledge transfer during the transition
Respond to and help remediate security incidents
Participate in the on-call rotation as needed

Requirements

English fluency
4+ years of experience in DevOps/DevSecOps roles with strong hands-on AWS expertise
Proven experience with CI/CD tooling such as GitHub Actions, Jenkins, or GitLab CI
Strong knowledge of container orchestration, including ECS, EKS, or Kubernetes, and Infrastructure-as-Code
Experience with security scanning tools such as Snyk, Trivy, or AWS Inspector and vulnerability remediation workflows
Solid understanding of network security, IAM, and secrets management on AWS
Excellent communication skills and ability to collaborate closely with leadership during an infrastructure transition
Experience working in SaaS/IoT environments is a strong plus
AWS certifications such as Security Specialty or DevOps Engineer Professional are a plus
Experience with PMS integrations or multifamily/proptech industry background is a plus
Familiarity with compliance frameworks relevant to SOC 2 audits is a plus
Experience documenting and transitioning systems from an outgoing team is a plus

Core Competencies

Demonstrates expertise in designing and maintaining secure CI/CD pipelines on AWS, implementing infrastructure-as-code with Terraform or CloudFormation, and managing container security and vulnerability remediation. Proficient in collaborating with development teams to integrate security into the SDLC while ensuring compliance with SOC 2 standards.