DevSecOps Engineer

Restoration of America · United States

Salary: $125,000 - 125,000 per year Requirements:

• We are looking for 7-10 years of experience in DevOps, Platform Engineering, SRE, Systems Administration, Cloud Engineering, or Software Engineering.
• We need strong scripting ability in tools such as Bash/Shell, Python, or similar languages.
• We expect hands-on ownership of security scanning, vulnerability management, and remediation practices aligned with OWASP and NIST guidance.
• We require deep practical experience with Git, preferably GitHub, CI/CD platforms, containers, and production orchestration such as Kubernetes or equivalent.
• We value experience with Infrastructure as Code tools and virtualization or cloud compute resources such as Proxmox, VMware, Hyper-V, AWS EC2, Azure VMs, GCP Compute Engine, or similar.
• We need hands-on knowledge of object storage and the S3 API, including bucket and access policy design, lifecycle management, versioning, and capacity planning.
• We require strong working knowledge of Linux administration and networking, including DNS, TLS, load balancing, and segmentation.
• We expect hands-on experience with observability platforms such as Grafana/Prometheus, Elastic/ELK, Datadog, New Relic, or similar.
• We are looking for a proven track record of improving DevOps and SRE practices in an established engineering organization and delivering in an agile environment.
• We need experience designing multi-tier or hybrid systems end to end, including sizing, redundancy, and integration decisions.
• We require the ability to document and present design trade-offs, risks, and cost implications to both technical and non-technical stakeholders.
• Preferred: hands-on experience deploying, operating, and maintaining data orchestration tools such as Airflow, Dagster, Prefect, Airbyte, or similar, including familiarity with data pipelines and AI/ML workloads.
• Preferred: experience operating self-hosted object storage platforms such as Garage, SeaweedFS, Ceph RADOS Gateway, RustFS, Versity, MinIO, or similar.
• Preferred: experience with managed cloud S3 providers such as Amazon S3, Google Cloud Storage, Wasabi, Backblaze B2, Cloudflare R2, or similar.
• Preferred: use of AI-powered tools to improve productivity, such as Copilot, automation assistants, or code generation.
• Preferred: experience with traditional development languages and frameworks such as .NET/C#, Java, or similar.
• Preferred: experience with secrets management, policy-as-code, or GitOps practices.
• Preferred: deeper knowledge of container orchestration, service meshes, or distributed tracing.
• Preferred: background in managing artifact repositories and software composition analysis.
• Preferred: familiarity with compliance frameworks and incident management tools.

• We will rely on you to own the architecture, standards, and governance of Infrastructure as Code across environments.
• You will automate provisioning, configuration, deployment, and operational workflows.
• You will manage compute, storage, virtualization, and hybrid VM/container environments.
• You will integrate security scanning, compliance checks, and vulnerability management into CI/CD pipelines.
• You will build, optimize, and maintain CI/CD pipelines.
• You will deploy and manage containerized applications and artifact repositories.
• You will evolve our monitoring and logging stack into full observability, including meaningful alerting, service-level objectives, dashboards, and tracing.
• You will lead incident response and root-cause analysis, and take part in a low-frequency on-call rotation.
• You will mentor engineers, developers, data analysts, and data scientists who build on our platforms, and lead secure design and deployment reviews plus documentation standards.
• You will own operational readiness, runbooks, and post-incident follow-through.
• You will define the platform and security tooling roadmap in partnership with the DevSecOps Director.
• You will lead threat modeling and security architecture reviews for new services and pipelines.
• You will evaluate and select infrastructure and security tooling, including build-versus-buy recommendations.
• You will partner with program and business stakeholders to translate requirements into solution designs and reference architectures for our on-premises environment.
• You will produce architecture documentation, diagrams, and decision records for proposed and delivered solutions.
• You will design for availability, disaster recovery, and capacity, including hardware sizing, backup topology, and recovery objectives.
• You will help design and build a multi-region, highly resilient architecture, including replication, failover, and cross-site networking.
• You will develop cost and total cost of ownership models covering hardware, licensing, and vendor selection.
• You will assess third-party platforms and self-hosted software for security, integration, and identity/access fit.

• AI
• Airflow
• API
• AWS
• Azure
• Bash
• C#
• CI/CD
• Cloud
• Copilot
• Ceph
• Datadog
• DevSecOps
• DevOps
• EC2
• ELK
• GCP
• Git
• GitHub
• GitOps
• Grafana
• Hardware
• Hyper-V
• Incident Management
• Java
• Kubernetes
• Linux
• Load Balancing
• OWASP
• Prometheus
• Python
• Security
• VMware
• ASP.NET
• Architect

More:

We are hiring a DevSecOps Engineer III for our team in Ponte Vedra, FL, with in-person work required and a commute expectation to the same location. This senior role reports to the DevSecOps Director and focuses on strengthening infrastructure and deployment pipeline security, reliability, and automation in a dynamic production setting. We offer a benefits package that includes 401(k), 401(k) matching, dental, health, vision, life insurance, a flexible spending account, a health savings account, and paid time off, with pay up to $125,000 per year. Our broader mission and organizational context center on Restoration of America and its leadership team, with an emphasis on best-in-class business practices, partnerships with like-minded organizations, and mission-driven work.

last updated 39 week of 2026