Senior DevSecOps Engineer – Zero Trust Setup

DataPro Services

Contract · Remote · Flexible hours

About the role

DataPro Services is launching an aggressive security hardening initiative for its suite of cloud‑hosted applications. As a Senior DevSecOps Engineer you will lead the integration of security controls into the CI/CD pipeline for the new Aegis Shield module, ensuring compliance and resilience across AWS environments.

Key responsibilities

• Design and implement automated security scans (Snyk, Trivy) within Jenkins pipelines for all micro‑services.
• Configure AWS Security Hub, GuardDuty, and Config rules to enforce baseline hardening across 12 accounts.
• Containerize legacy services with Docker, embed runtime security (Aqua, Falco) and enforce least‑privilege IAM policies.
• Develop Terraform modules to provision encrypted S3 buckets, VPC flow logs, and network ACLs as part of the Aegis Shield rollout.
• Conduct weekly threat‑modeling workshops and produce remediation tickets with clear acceptance criteria.
• Document security architecture decisions and create runbooks for incident response.

Must-have skills

• Deep experience with AWS security services and IAM policy design.
• Proficiency in CI/CD tools (Jenkins, GitLab CI) and infrastructure as code (Terraform, CloudFormation).
• Hands‑on container security using Docker, Kubernetes, and runtime scanners.
• Strong scripting ability in Python or Bash for automation.
• Solid understanding of DevSecOps best practices and compliance frameworks (CIS, NIST).

Nice to have

• Experience with serverless security (Lambda, API Gateway).
• Certifications such as AWS Security Specialty or Certified DevSecOps Engineer.