DevSecOps Engineer

Role overview A hands-on DevSecOps Engineer is needed to own the infrastructure, deployment pipelines, and security posture behind a live trading platform serving a global community of futures and crypto traders. The role splits evenly between shipping CI/CD and infrastructure improvements that let the engineering team move faster, and running the security program that protects trader data and platform integrity. It is fully remote within the U.S., reports to engineering leadership, and suits someone energized by performance-critical fintech where milliseconds and security both matter.

Responsibilities - Design, build, and maintain CI/CD pipelines using GitHub Actions with OIDC-based cloud authentication across services and repositories. - Manage and scale AWS infrastructure spanning EC2, S3, SES, ECR, Parameter Store, and IAM, including Docker-based deployments with reverse proxy and TLS termination. - Build infrastructure-as-code for repeatable, auditable environment provisioning, and improve observability through logging, metrics, tracing, and alerting. - Support PostgreSQL and Redis operations, including backups, failover, and performance tuning in production. - Own vulnerability management across infrastructure and application layers, including scanning, triage, patching cadence, and remediation tracking. - Lead security reviews before shipping new infrastructure or integrations, enforce least-privilege access and secrets management, and run incident response from detection through postmortem.

Requirements - Demonstrated experience owning both infrastructure/DevOps and security operations responsibilities, or strong depth in one area paired with real exposure to the other. - Production AWS experience with EC2, S3, IAM, ECR, Parameter Store, or equivalent secrets management. - Strong Docker and containerization skills, including writing and hardening Dockerfiles and Compose configurations. - Hands-on CI/CD pipeline design with GitHub Actions or equivalent, including OIDC-based cloud authentication. - Solid grounding in network and application security fundamentals such as TLS, firewalls, IAM, and least privilege, plus experience with vulnerability scanning and patch management. - Comfort with Linux systems administration, shell scripting, leading incident response, and operating independently in a high-ownership startup environment.

Nice to have - Fintech, trading, or other regulated-industry background. - Familiarity with SOC 2 or PCI DSS, SIEM tooling or managed detection and response platforms, and infrastructure-as-code tools such as Terraform or Pulumi. - Experience with reverse proxies and TLS automation (Caddy, nginx, Traefik) and AI-assisted development workflows.

Benefits and work setup - Fully remote within the U.S. - Competitive base salary, performance bonuses, and comprehensive benefits, with high ownership from day one and direct influence over architecture and tooling decisions in a small team structure.