Senior DevSecOps Engineer

Certa.ai is an AI-first third-party operating system utilized by enterprises for vendor management and compliance. They are seeking a Senior DevSecOps Engineer to enhance their AWS production infrastructure and implement security-first engineering practices across their product ecosystem.

Responsibilities:

• AWS infrastructure & operations: Manage, secure, and scale AWS production workloads (EKS, ECS, EC2, Lambda) and core services (S3, IAM, CloudFront, API Gateway, VPC/networking, WAF), owning incident response, RCA, uptime, and SLA/performance
• CI/CD & automation: Build and maintain secure CI/CD pipelines (Jenkins, GitHub Actions, GitLab CI, CodePipeline) with embedded SAST/DAST/SCA, container, and IaC scanning, and automate provisioning via Terraform/CloudFormation with policy-as-code guardrails
• Security engineering: Embed Zero Trust, least-privilege IAM, secure key management, and defense-in-depth across the AWS architecture, and drive vulnerability management and compliance monitoring
• Observability & reliability: Stand up monitoring and alerting (CloudWatch, Prometheus, Grafana, ELK) for proactive anomaly detection and debugging across infrastructure, networking, and application layers
• Cross-functional enablement: Partner with Development and QA to improve deployment velocity, document architecture standards and runbooks, and mentor engineers on DevSecOps best practices

Requirements:

• 6–8 years in Cloud / DevOps / DevSecOps, with strong hands-on AWS production experience (EKS, ECS, EC2, S3, CloudFront, API Gateway, IAM, WAF, VPC)
• Deep Kubernetes, Docker, and Infrastructure-as-Code (Terraform / CloudFormation) expertise
• CI/CD tooling (Jenkins, GitHub Actions, GitLab CI, CodePipeline)
• Strong networking fundamentals (VPC design, routing, DNS, TLS, load balancing)
• Experience integrating security scanning and compliance controls
• Solid scripting (Bash, Python, Helm, Terraform, YAML/JSON)
• Strong troubleshooting and analytical skills