DevSecOps Engineer

CIED Group is looking for a DevSecOps Engineer to own infrastructure, deployment, and security across our products, including RightOrigins and RightData. We run a mix of AWS, DigitalOcean, and Azure, with Django, DRF, Postgres, and Celery at the core, plus a growing set of containerized and serverless services supporting our RAG and multi agent workloads. This role researches and chooses the right tools and infrastructure patterns as we scale, builds and runs what gets chosen, and owns the security posture of our systems end to end, including scanning, vulnerability management, and coordination of external audits and assessments. Key Responsibilities Research, evaluate, and recommend infrastructure and tooling choices as our systems scale, and take ownership once a direction is chosen Design and maintain CI/CD pipelines using Jenkins and self hosted GitLab CI Own and evolve infrastructure across AWS, DigitalOcean, and Azure, including networking, IAM, and service configuration Manage infrastructure as code using Terraform and Ansible across services and environments Work with containerized deployments and orchestration, including Kubernetes and serverless container services Design scaling strategies suited to variable and bursty workloads, including services that need to scale down to nothing when idle Own container and dependency scanning as part of the CI/CD pipeline, and drive remediation of findings Implement and maintain SAST and DAST practices across the codebase and running services Coordinate and manage VAPT engagements with external vendors, from scoping through remediation tracking Own access control and secrets management across environments, including tools like Teleport Monitor system performance, cost, reliability, and security posture, and proactively flag where changes are needed Work with backend and architecture teams to turn system requirements into concrete infrastructure and security decisions Set up and maintain logging, metrics, tracing, and security monitoring across services, including agent based workloads Support compliance related work, such as responding to client security questionnaires and maintaining evidence for certifications like ISO 27001 Write and maintain documentation, runbooks, and infrastructure and security diagrams for the team Keep up with new tooling and practices across DevOps and security, and bring in what's actually useful Required Qualifications Experience 4+ years in DevOps, SRE, infrastructure, or security engineering, with real ownership of both infrastructure and security responsibilities Hands on experience running infrastructure across AWS and at least one other cloud (DigitalOcean or Azure) Experience with containerized and serverless deployments Experience with infrastructure as code, ideally Terraform and Ansible Experience building CI/CD pipelines with tools like Jenkins or GitLab CI Experience running container and dependency scanning…