Senior DevSecOps Engineer

Posted 1hrs ago

Employment Information

Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

Senior DevSecOps Engineer at Generac managing cloud services and ensuring security and compliance in data handling. Leading efforts in secure cloud infrastructure design and integrating security in development processes.

Responsibilities:

  • Serve as a technical leader at the intersection of development, security and operations for our cloud team
  • Ensure that all cloud services, networks and data pipelines are secure and compliant with industry standards
  • Work closely with the development team, prioritizing a “Shift Left” culture by automating compliance and security scanning throughout the software development lifecycle
  • Design and implement secure-by-default cloud infrastructure to handle data transmitted from IoT devices
  • Develop secure mechanisms for data storage and processing, including encryption and secure authentication frameworks
  • Enable the provisioning of secure cloud infrastructure through the development of infrastructure as code (IaC) modules
  • Ensure all data transmitted from IoT devices to the industrial cloud is encrypted and securely handled
  • Implement network-level security measures
  • Oversee the integration of various cloud services to ensure secure data ingestion, storage, and processing
  • Ensure the industrial cloud infrastructure complies with security standards such as ISO 27001

Requirements:

  • B.S. in Computer Science, Cybersecurity, Engineering or equivalent years of work experience
  • 5+ years of experience in cloud security, with a focus on securing cloud infrastructure for data processing and storage
  • Strong understanding of cloud security, identity management, secure communication protocols (e.g., TLS), and data encryption
  • Proven experience working with public cloud platforms (e.g., AWS, Azure, Google Cloud) to secure cloud environments and services
  • Experience with SAST/DAST tools, container security and vulnerability management
  • Knowledge of ISO 27001 compliance requirements for cloud environments
  • Experience with infrastructure as code, preferably Terraform
  • Certifications such as CISSP, CCSP, GCSA or cloud-specific security or automation certifications are highly desirable

Benefits:

  • medical, dental and vision plans
  • life insurance
  • long-term disability
  • flexible spending and health savings accounts
  • accrued paid time off
  • paid Holidays
  • 401(k)/RRSP retirement benefits