Senior DevSecOps Engineer

PactFi

Senior DevSecOps Engineer improving security, reliability, and infrastructure at PactFi. Collaborating with engineering teams to strengthen CI/CD workflows and manage AWS infrastructure.

Posted 5/11/2026full-timeRemote • New York • 🇺🇸 United StatesSenior💰 $165,000 - $225,000 per yearWebsite

Tech Stack

Tools & technologies

AWSCloudDistributed SystemsDNSFirewallsLinuxPythonTerraform

About the role

Key responsibilities & impact

Design, build, and improve secure, scalable AWS infrastructure using infrastructure-as-code (Terraform, Pulumi-Python)
Improve cloud networking, IAM, secrets management, environment isolation, and secure configuration
Standardize provisioning, access control, auditability, and change management
Troubleshoot infrastructure issues and drive long-term fixes that reduce operational toil
Build, maintain, and improve secure CI/CD pipelines for application, infrastructure, and platform deployments
Support container-based build and deployment workflows, including rolling updates and rollback strategies
Support Environment as a Service for the engineering and QA teams
Reduce deployment friction while maintaining strong security and compliance controls
Embed security controls into infrastructure, CI/CD pipelines, and cloud operations
Support SOC 2 Type 2 readiness through control implementation, evidence collection, access reviews, and audit support
Manage secrets, IAM, least-privilege access, and vulnerability management across containers, dependencies, and cloud services
Ensure sensitive data is protected across logs, pipelines, monitoring systems, backups, and AI-assisted workflows
Build and improve observability across logs, metrics, dashboards, and alerts; maintain centralized logging pipelines
Define and maintain SLOs, SLIs, alerting standards, and escalation paths
Participate in a 24/7 production on-call rotation; support incident response, root-cause analysis, and postmortems
Create and maintain runbooks, playbooks, and operational documentation
Design, document, and improve BC/DR plans; support RTO/RPO planning for critical systems
Implement and test backup, restore, replication, failover, and recovery procedures
Identify single points of failure and drive remediation across infrastructure, data stores, and operational processes

Requirements

What you’ll need

6+ years in DevOps, DevSecOps, SRE, platform engineering, infrastructure, or security engineering
Strong hands-on AWS experience, including IAM, networking, logging, monitoring, and secure access patterns
Solid CI/CD pipeline development and release automation experience; container build and deployment workflows
Infrastructure-as-code with Terraform and/or Pulumi (Python); strong scripting in Python, Bash, or similar
Strong Ubuntu/Linux command-line experience
Strong networking fundamentals, including VPCs, DNS, TLS, routing, firewalls/security groups, load balancing, and private connectivity
Observability tooling: logs, metrics, dashboards, alerts, and operational visibility
Experience with secrets management, IAM, audit logging, vulnerability scanning, and secure configuration
Strong hands-on experience with AI tools (e.g. Claude, ChatGPT) and AI-assisted development workflows, including an understanding of related security and data-handling risks
Experience participating in 24/7 on-call operations and supporting high-reliability production systems
Hands-on experience supporting SOC 2 Type 2 and/or ISO 27001 frameworks
Experience implementing controls for access management, change management, incident response, logging, and data protection
Ability to translate compliance requirements into practical, repeatable technical controls
Experience in regulated or security-sensitive environments (fintech, healthcare, enterprise SaaS) is a strong plus
Strong understanding of distributed systems, failure modes, and resilience; experience with SLOs/SLIs and incident management
Strong communication skills; comfortable working closely with a technical lead while independently owning deliverables
Able to provide senior-level technical judgment and practical recommendations across DevSecOps, infrastructure, and security decisions
Ownership mindset, strong documentation habits, and comfort operating in high-accountability production environments.

Benefits

Comp & perks

Competitive salary + equity
Healthcare coverage
401k

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

AWSTerraformPulumiPythonBashCI/CDUbuntunetworkingobservabilitysecrets management

Soft Skills

communicationownership mindsetdocumentation habitstechnical judgmentincident managementroot-cause analysispostmortemscollaborationindependent ownershipproblem-solving