Staff Engineer, DevSecOps

Accountabilities:: Design, develop, test, deploy, and maintain scalable, secure, and reliable software services, with a focus on backend systems, microservices, and APIs. Contribute to architecture and design decisions involving cloud architecture, application security, scalability, reliability, and technology selection. Build and maintain CI/CD pipelines that automate software builds, testing, security validation, deployments, and releases across development and production environments. Implement and manage Infrastructure as Code using Terraform, CloudFormation, or equivalent technologies to provision and maintain AWS infrastructure securely and consistently. Develop and operate containerized applications and supporting platforms using Docker and Kubernetes/EKS. Integrate DevSecOps practices throughout the software development lifecycle, including automated security testing, vulnerability scanning, secrets management, and compliance controls. Deploy and maintain observability capabilities for microservices and APIs, including centralized logging, metrics, distributed tracing, alerting, and performance monitoring. Troubleshoot complex application, infrastructure, deployment, and production issues, perform root-cause analysis, and implement preventative improvements. Conduct code, architecture, infrastructure, and security reviews to identify vulnerabilities, reliability risks, and opportunities for improvement. Participate in vulnerability management, threat assessments, security reviews, and remediation activities across applications, dependencies, containers, and cloud infrastructure. Maintain AWS security, compliance, governance, and access-control practices in accordance with organizational policies and applicable standards. Create and maintain technical documentation, including architecture diagrams, deployment procedures, runbooks, API documentation, security controls, and operational procedures. Collaborate with software engineers, architects, security teams, infrastructure teams, and other stakeholders to establish secure and reliable engineering practices. Mentor engineers and promote a culture of automation, security, reliability, continuous improvement, and knowledge sharing. Evaluate emerging technologies and recommend tools and practices that improve productivity, security, scalability, and operational efficiency. Contribute to technical estimation, prioritization, planning, and delivery of medium-to-large engineering initiatives while reducing technical debt and operational complexity. Requirements: Strong professional experience in DevSecOps, cloud engineering, software engineering, infrastructure automation, and secure software delivery. Strong proficiency in Python and Kubernetes , which are required for the role. Hands-on experience with AWS, CI/CD, Infrastructure as Code, containers, automation, and cloud security practices. Experience with technologies such as Groovy, Bash, Go, Maven, Jenkins, Terraform, and Docker. Strong understanding of microservices, APIs, backend systems, application security, scalability, reliability, and production operations. Experience implementing CI/CD pipelines and integrating automated testing, security validation, vulnerability scanning, and compliance checks. Experience with Terraform, CloudFormation, or comparable Infrastructure as Code technologies. Strong knowledge of Kubernetes/EKS and containerized application environments. Experience with observability, centralized logging, metrics, tracing, alerting, and performance monitoring. Ability to troubleshoot complex production and infrastructure issues and conduct effective root-cause analysis. Strong understanding of cloud security, access controls, vulnerability management, threat assessment, and security remediation. Ability to work independently on ambiguous and complex initiatives while collaborating effectively across technical teams. Strong communication, mentoring, knowledge-sharing, and technical leadership skills. Experience working with large-scale, production-ready systems is a plus. Familiarity with PostgreSQL, GitHub Actions, Camunda, FHIR, or AI/ML is a plus. U.S. citizenship or Green Card required; new sponsorship is not available. Must have resided in the United States for at least the past three years. Must be able to meet the requirements for a position of Public Trust, including successfully completing a U.S. government background investigation. Benefits: Remote-first, remote-only work culture. Four weeks of paid time off annually, prorated during the first year based on start date. 10 paid floating company holidays. Flexible work schedule. Work-from-home setup, including a MacBook. Collaborative and learning-focused work environment. Medical, dental, and company-paid vision insurance. Optional HSA with eligible medical plans and a company contribution. Company-paid basic life and AD&D insurance. Company-paid short- and long-term disability insurance. Optional critical illness and accident insurance. 401(k) plan with a 3% safe harbor contribution. Wellness resources and virtual care. Employee discounts and additional perks.