Senior DevSecOps Engineer – Audit Readiness

NovaForge Tech

Contract · Remote · Flexible hours

About the role

NovaForge Tech is expanding its B2B platform with a new multi‑tenant capability called "Titan Vault". As a Senior DevSecOps Engineer you will embed security controls directly into the delivery pipeline for this feature, ensuring isolation and compliance across all tenant environments.

Key responsibilities

• Design and implement Terraform modules for tenant‑specific VPCs, IAM roles, and KMS keys.
• Integrate Snyk and Trivy scans into GitHub Actions workflows to enforce image hardening before deployment.
• Build automated security gate checks in Jenkins pipelines that validate OWASP ZAP results for each tenant release.
• Configure AWS GuardDuty and Security Hub alerts tailored to multi‑tenant threat surfaces.
• Collaborate with the backend team to containerize the "Titan Vault" microservice using Docker best practices and run-time security policies.
• Document CI/CD hardening guidelines and conduct knowledge‑transfer sessions for the internal DevOps crew.

Must-have skills

• 5+ years in DevSecOps with strong AWS experience.
• Proficiency in Terraform, Docker, and Kubernetes.
• Hands‑on with CI/CD tools such as GitHub Actions, Jenkins, or GitLab CI.
• Experience integrating static and dynamic security testing tools.
• Solid understanding of multi‑tenant architecture and network segmentation.

Nice to have

• Knowledge of service mesh security (e.g., Istio).
• Previous work on SaaS compliance frameworks (SOC2, ISO27001).