What are the responsibilities and job description for the Senior DevSecOps Engineer position at FreshtechIT?
Senior DevSecOps Engineer - NYC ( onsite/ remote all of August)
We’re looking for a Senior DevSecOps Engineer to join a high-performing engineering organisation within a leading financial services environment.
This is a hands-on, high-ownership IC role for someone who enjoys building security into engineering platforms rather than simply identifying security findings.
You’ll take ownership of security engineering across CI/CD, AWS, Kubernetes, identity and authentication, software supply chain security, and an emerging AI platform.
As the Senior DevSecOps you will be responsible for:
• Define and own security engineering strategy for internal developer platforms and shared infrastructure
• Build automated vulnerability management and remediation tooling that engineering teams actually adopt
• Own secrets, identity, authentication and workload identity tooling
• Secure CI/CD across GitHub Actions, ArgoCD and related platforms
• Implement software supply-chain security including SBOM, SLSA, cosign/sigstore, dependency and container scanning
• Design AWS security governance covering SCPs, IAM, KMS, secrets and workload identity
• Build secure-by-default Terraform modules and reusable platform patterns
• Strengthen EKS/Kubernetes security, including admission control, network policies, image/runtime security and tenant isolation
• Help shape security architecture for AI/ML platforms, including model access, agent security, data boundaries and AI supply chains
• Use AI-assisted engineering tools to dramatically increase engineering productivity
• Partner with InfoSec, AppSec and engineering teams to turn security requirements into practical engineering solutions
As the DevSecOps you will have the following experience:
• Solid hands-on engineering experience, including security-focused roles
• Proven experience building security tooling/platforms adopted by engineering teams
• Strong AWS security expertise — IAM, SCPs, KMS, workload identity and secrets management
• Deep CI/CD and software supply-chain security experience
• Strong Kubernetes/EKS security experience
• Hands-on programming experience with Python, Go, Bash or similar
• Strong Linux and distributed-systems experience
• Experience with Terraform and infrastructure automation
• A strong threat-modelling and adversarial mindset
• Experience with AI-assisted development tools such as Claude Code, GitHub Copilot or autonomous agents
We are offering a competitive package benefits .
The roles are onsite ( remote all of August)
Please contact hello AT Freshtechit.com for more details