Назад
Company hidden
6 дней назад

DevSecOps Engineer (Azure)

Формат работы
onsite
Тип работы
fulltime
Грейд
middle
Английский
c1
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
DevSecOps Engineer (Azure): Strengthening cloud security for a multi-tenant SaaS platform serving the freight industry with an accent on infrastructure as code, vulnerability management, penetration testing, and secure deployment of internal AI tools. Focus on designing identity-based cloud controls, automating security testing and remediation, and building Azure telemetry, alerting, and compliant infrastructure.

Location: United States. Other locations: LATAM and North America.

Company

hirify.global is building a multi-tenant SaaS platform for transportation operations in the freight and logistics industry.

What you will do

  • Design and deliver cloud security infrastructure, including network isolation, identity-based access, secure defaults, and infrastructure-as-code changes without customer downtime.
  • Run vulnerability management, drive remediation within SLAs, improve security-finding automation, and extend scanning with AI-assisted security testing.
  • Manage third-party penetration tests from scoping through retesting and mature the internal AI-assisted penetration-testing tool.
  • Deploy and operate internal security, IT, and AI applications in Azure with correctly configured identity, secrets, networking, and backups.
  • Build OpenTelemetry-to-Azure Monitor telemetry pipelines, dashboards, and alerts for anomalous activity.
  • Partner with DevOps, engineering, and IT & Security teams; maintain runbooks, documentation, and SOC 2 evidence.

Requirements

  • Fluent spoken and written English.
  • 3+ years of professional experience in DevOps, cloud infrastructure, platform engineering, or security engineering.
  • Hands-on experience with at least one major cloud provider—Azure, AWS, or GCP—including networking, identity and access management, and secrets management.
  • Production experience with infrastructure as code, preferably Terraform.
  • Experience building and maintaining CI/CD pipelines.
  • Working knowledge of containers and Kubernetes.
  • Scripting skills in Python, PowerShell, or Bash.
  • Understanding of common security risks in cloud and web applications and how to fix them.
  • Ability to explain technical risk clearly to engineers and non-engineers.

Nice to have

  • Azure experience with private endpoints, VNet integration, and Entra ID managed identities.
  • Application security testing experience with SCA, SAST, or DAST, and interest in applying AI to security testing.
  • Experience coordinating penetration tests or working with external security firms.
  • Experience with OpenTelemetry, Azure Monitor, or similar observability tools; KQL alert-query experience is a plus.
  • Familiarity with SOC 2, ISO 27001, or CIS Benchmarks.
  • Interest in deploying and monitoring AI tooling safely.
  • Security certifications such as AZ-500, Security+, or similar.
  • Background in logistics or transportation.

Culture & Benefits

  • Engineering culture emphasizes real-world impact, ownership, transparency, pragmatic security, and maintainable architecture.
  • Security partners with engineering and DevOps teams rather than acting as a gatekeeper.
  • The culture supports sustainable work, time away, and avoiding burnout or always-on behavior.
  • hirify.global is committed to a diverse and inclusive workplace and provides accommodations during the recruitment process.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →