Senior DevSecOps Engineer
FreshtechIT · New York, United States
Apply & track with Apply EdgeSenior DevSecOps Engineer - NYC ( onsite/ remote all of August)We’re looking for a Senior DevSecOps Engineer to join a high-performing engineering organisation within a leading financial services environment.This is a hands-on, high-ownership IC role for someone who enjoys building security into engineering platforms rather than simply identifying security findings.You’ll take ownership of security engineering across CI/CD, AWS, Kubernetes, identity and authentication, software supply chain security, and an emerging AI platform.As the Senior DevSecOps you will be responsible for:• Define and own security engineering strategy for internal developer platforms and shared infrastructure• Build automated vulnerability management and remediation tooling that engineering teams actually adopt• Own secrets, identity, authentication and workload identity tooling• Secure CI/CD across GitHub Actions, ArgoCD and related platforms• Implement software supply-chain security including SBOM, SLSA, cosign/sigstore, dependency and container scanning• Design AWS security governance covering SCPs, IAM, KMS, secrets and workload identity• Build secure-by-default Terraform modules and reusable platform patterns• Strengthen EKS/Kubernetes security, including admission control, network policies, image/runtime security and tenant isolation• Help shape security architecture for AI/ML platforms, including model access, agent security, data boundaries and AI supply chains• Use AI-assisted engineering tools to dramatically increase engineering productivity• Partner with InfoSec, AppSec and engineering teams to turn security requirements into practical engineering solutionsAs the DevSecOps you will have the following experience:• Solid hands-on engineering experience, including security-focused roles• Proven experience building security tooling/platforms adopted by engineering teams• Strong AWS security expertise — IAM, SCPs, KMS, workload identity and secrets management• Deep CI/CD and software supply-chain security experience• Strong Kubernetes/EKS security experience• Hands-on programming experience with Python, Go, Bash or similar• Strong Linux and distributed-systems experience• Experience with Terraform and infrastructure automation• A strong threat-modelling and adversarial mindset• Experience with AI-assisted development tools such as Claude Code, GitHub Copilot or autonomous agentsWe are offering a competitive package+ benefits .The roles are onsite ( remote all of August)Please contact hello AT Freshtechit.com for more details