[Remote] Senior DevOps Engineer

Note: The job is a remote job and is open to candidates in USA. PAR Technology is a restaurant technology company providing software and hardware solutions for restaurants and retail brands. The company is seeking a hands-on Senior DevOps Engineer to embed security into software development and operations by designing secure CI/CD pipelines, hardening cloud infrastructure, managing platform security, and improving engineering reliability.

Responsibilities

• Design, build, and operate secure CI/CD pipelines with integrated SAST, DAST, SCA, secrets scanning, and container image scanning, making the secure path the easy path for product teams
• Harden and automate AWS and/or Azure infrastructure using infrastructure-as-code, with security policies enforced through OPA, Sentinel, or native policy engines
• Own container and orchestration security across Docker and Kubernetes, including image provenance, runtime protection, network policies, and admission controls
• Implement and tune cloud security posture management, vulnerability management, and threat detection capabilities, and partner with engineering teams to drive findings through remediation
• Build and maintain secure secrets management, identity, workload identity, service mesh mTLS, and least-privilege access patterns
• Lead threat modeling and secure design reviews for new services and architectures, partnering with product engineering early in the development lifecycle
• Respond to security events and lead post-incident analysis, improving detection, alerting, and runbooks after each incident
• Design and manage cloud networking, including VPC/VNet architecture, subnetting, routing, NAT, peering, transit gateways, private endpoints, and hybrid connectivity
• Operate edge and traffic-layer security, including load balancers, API gateways, WAF, DDoS protection, CDN configuration, DNS management, and TLS certificate lifecycle/PKI automation
• Implement GitOps-based delivery using Argo CD or Flux with Helm/Kustomize and progressive delivery patterns such as blue-green and canary releases with automated rollback
• Build and operate observability capabilities across metrics, logging, tracing, and alerting, with defined SLOs and actionable, low-noise alerts
• Manage artifact repositories and software supply-chain controls, including image registries, SBOM generation, artifact signing, and provenance using technologies such as Sigstore/Cosign and SLSA
• Drive capacity planning, autoscaling, and cloud cost optimization across compute, storage, and network layers without compromising security
• Champion compliance-relevant engineering controls, including PCI DSS and SOC 2, and automate evidence collection wherever possible
• Mentor engineers on secure coding and operational security practices, acting as a force multiplier rather than a gatekeeper

Skills

• 6-12 years of experience across DevOps, platform engineering, security engineering, or a related field, including at least 3 years focused on DevSecOps or application/cloud security in production environments
• Deep hands-on experience with CI/CD platforms such as GitHub Actions, GitLab CI, Jenkins, or Azure DevOps, including embedding security tooling into delivery pipelines
• Strong cloud engineering experience with AWS and/or Azure, including IAM, networking, encryption, logging, and monitoring services
• Production experience with Kubernetes and containers, including securing clusters and workloads at scale
• Proficiency with infrastructure-as-code tools such as Terraform or CloudFormation and at least one scripting or programming language such as Python, Go, or Bash
• Solid networking fundamentals, including TCP/IP, DNS, HTTP/HTTPS, TLS, routing, firewalls, security groups/NACLs, segmentation, and troubleshooting tools such as tcpdump, dig, and Wireshark
• Hands-on cloud networking experience with VPC/VNet design, load balancing, ingress controllers, private connectivity, service mesh technologies, and zero-trust network patterns
• Experience operating observability platforms such as Prometheus, Grafana, ELK/OpenSearch, or Datadog and using telemetry to improve reliability and security outcomes
• Working knowledge of application security, including the OWASP Top 10, dependency and software supply-chain risk, secrets hygiene, and secure SDLC practices
• Experience with security scanning and monitoring tools such as Snyk, Trivy, SonarQube, Wiz, Prisma Cloud, Falco, or equivalent platforms
• Clear, pragmatic communication skills with the ability to explain risk and trade-offs to engineers and leaders and influence without direct authority
• Experience with multi-region, highly available architectures, disaster recovery, and chaos engineering practices
• Experience in payments, fintech, retail, or another PCI DSS-regulated environment
• Exposure to zero-trust architectures, SIEM/SOAR platforms, or internal security platforms and paved-road tooling
• Contributions to open-source security tooling or active participation in the security community
• Security certifications such as CISSP, CKS, OSCP, AWS Certified Security - Specialty, Azure security certifications, or GIAC; networking certifications such as CCNA or AWS Certified Advanced Networking - Specialty

Company Overview

Company H1B Sponsorship