Senior DevSecOps Engineer – Zero Trust Setup Upgrade

Keystone Digital

Contract · Remote · Flexible hours

About the role

Keystone Digital is scaling its B2B SaaS platform with a new multi‑tenant capability called the TenantX Engine. As a Senior DevSecOps Engineer you will embed security controls directly into the CI/CD pipeline and ensure each tenant environment meets compliance standards while accelerating feature rollout.

Key responsibilities

• Design and implement Terraform modules for isolated tenant VPCs on AWS.
• Integrate Snyk and Trivy scans into GitHub Actions for every pull request.
• Automate secret rotation using HashiCorp Vault and AWS KMS across tenant clusters.
• Develop Helm charts that enforce pod security standards for the TenantX microservices.
• Set up automated canary deployments and monitor drift with AWS Config.
• Collaborate with product owners to define security acceptance criteria for each sprint milestone.

Must-have skills

• Extensive experience with CI/CD tools (GitHub Actions, Jenkins).
• Deep knowledge of container security (Docker, Kubernetes, Helm).
• Proficiency in IaC (Terraform, CloudFormation) on AWS.
• Hands‑on expertise with vulnerability scanning and secret management.
• Strong scripting skills (Python, Bash) for automation.

Nice to have

• Experience with service mesh security (Istio, Linkerd).
• Familiarity with compliance frameworks such as SOC 2 or ISO 27001.