Weekday (YC W21)DevSecOps Engineer
This role is for one of the Weekday's clients
Min Experience: 4 years
Location: Remote (India)
JobType: full-time
We are looking for a highly skilled DevSecOps Engineer with 4–7 years of experience to join our growing engineering team. In this role, you will be responsible for integrating security practices into the DevOps lifecycle while building and maintaining scalable, secure, and reliable cloud infrastructure. The ideal candidate has strong hands-on experience with AWS cloud services, automation, and security best practices, and is passionate about improving development pipelines while ensuring infrastructure and applications remain secure.
As a DevSecOps Engineer, you will collaborate closely with software engineers, security teams, and infrastructure specialists to implement security-first development workflows. You will play a critical role in designing and managing cloud environments, automating infrastructure provisioning, strengthening CI/CD pipelines, and embedding security controls throughout the software development lifecycle.
Key Responsibilities
- Design, implement, and manage secure cloud infrastructure primarily on AWS.
- Integrate security practices into the CI/CD pipeline to ensure continuous security validation throughout the development lifecycle.
- Automate infrastructure provisioning and configuration using Infrastructure as Code (IaC) tools such as Terraform or CloudFormation.
- Monitor cloud environments for security vulnerabilities, compliance risks, and performance issues.
- Implement container security, vulnerability scanning, and secrets management practices.
- Collaborate with development teams to enforce secure coding practices and ensure applications are deployed securely.
- Manage and optimize CI/CD pipelines to support faster and more secure application deployments.
- Conduct security reviews, threat modeling, and risk assessments for new services and infrastructure changes.
- Configure monitoring, logging, and alerting systems to detect and respond to potential security incidents.
- Continuously improve automation, reliability, and security posture across cloud and infrastructure platforms.
Required Qualifications
- 4–7 years of experience in DevOps, DevSecOps, or cloud infrastructure engineering.
- Strong hands-on experience with AWS services such as EC2, S3, IAM, VPC, CloudWatch, Lambda, and RDS.
- Experience implementing secure CI/CD pipelines using tools like Jenkins, GitHub Actions, GitLab CI, or similar platforms.
- Solid understanding of Infrastructure as Code tools such as Terraform or AWS CloudFormation.
- Experience with containerization and orchestration technologies like Docker and Kubernetes.
- Knowledge of cloud security best practices, identity and access management, encryption, and compliance frameworks.
- Familiarity with security scanning tools for code, containers, and infrastructure.
- Experience implementing monitoring and observability tools for production systems.
- Strong scripting and automation skills using languages such as Python, Bash, or similar.
- Good understanding of networking, system architecture, and distributed systems.
Preferred Qualifications
- AWS certifications such as AWS Certified Solutions Architect, AWS Security Specialty, or AWS DevOps Engineer.
- Experience implementing zero-trust security models and advanced cloud security frameworks.
- Familiarity with security compliance standards such as SOC 2, ISO 27001, or PCI-DSS.
- Experience working in highly scalable or microservices-based environments.