[Remote] Senior DevSecOps Cloud Consultant

Note: The job is a remote job and is open to candidates in USA. Vertical Relevance is seeking a Senior DevSecOps Cloud Consultant to join its team as a full-time employee. The role involves implementing technical solutions for customer engagements, guiding cloud adoption, and designing and automating AWS security and compliance solutions. The consultant will also develop technical content, support solution and roadmap development, and contribute to thought leadership and customer success.

Responsibilities

• Help customers shape their journey to adopting the cloud and provide our customers with technical and strategic guidance on their “cloud journey”
• Consult, plan, design, and implement security solutions on the cloud customers
• Design and automate security and compliance solutions
• Become a deep technical resource that earns our customer's trust
• Develop high-quality technical content such as automation tools, reference architectures, and white papers to help our customers build on the cloud
• Innovate on behalf of customers and translate your thoughts into action yielding measurable results
• Support solution development by conveying customer needs and feedback as input to technology roadmaps. Share real world implementation challenges and recommend expansion of capabilities through enhanced and new offerings
• Assist with technical briefs that document solutions
• Assist with reference architecture implementations
• Support internal and external brand development through thought leadership:
• Work with Marketing/Alliances to write blog posts
• Work with Marketing/Alliances to develop internal case studies
• Assist Customer with organizational hierarchy design and configuration templates
• Assist Customer in the development of referenceable playbooks, supported by relevant code examples
• Assist Customer in the development of sample runbooks to automate the implementation of AWS account setup and configuration
• Developing an automated Continuous Delivery Pipeline framework that will be used to establish AWS Accounts to configured, tested infrastructure on AWS in a repeatable, reliable and secure manner eliminating the need for manual intervention
• Development of the Service Control Policies and account baselines associated with the Customer’s security and compliance requirements
• Assist Customer with the development of a report and supporting sample code addressing the controls as part of the playbook
• Creating a framework to automatically gather, transform and interpret security event data in AWS
• Selecting, defining, identifying security requirements and determine where:
• Macie can be leveraged
• GuardDuty can be leveraged
• Inspector can be leveraged
• Security Hub can be leveraged
• Alternative security products can be leveraged
• Codify the provisioning of security analytics and reporting workflow:
• Implement Security Hub with in a central account with inputs from all accounts
• Implement GuardDuty for global security events
• Implement Macie for detection of sensitive data in 23 buckets
• Develop AWS Config rules to enforce security configurations in CIS AWS Foundations standard
• Implementing Inspector to gather findings from EC2 instances
• Enable CloudTrail for monitoring API activity
• Enable FlowLogs for VPC traffic
• Selecting tools for building Policy-as-Code controls (preventative, detective, and responsive)
• Development of referenceable playbooks, supported by relevant code examples for controls
• Development of sample runbooks to automate the implementation of controls:
• Policy Definition – Identification and documentation of Customer Policy in the form of specific statements that must be true about configuration of AWS resources
• Policy-as-Code Development – Development of the logical tests associated with each of the policies established to be used to assert the configuration state of infrastructure on AWS in order to block a build in the pipeline, take automated reactive action, or alert on violations to the policy
• Framework Development – A design allowing for the execution of logical tests against infrastructure code or running AWS infrastructure in order to assert the configuration state of infrastructure resources on AWS and block a build in the pipeline, take automated reactive action, or alert on violations to the policy
• Development of a report and supporting sample code addressing the controls as part of the playbook

Skills

• Professional experience architecting/operating automated Security & Compliance / DevSecOps solutions built on AWS
• Experience in software/technology customer facing experience and Financial Services +
• Primary Languages – Python, Java, Bash, a must be able to code
• Tooling, Services & Libraries – Jenkins, Gitlab, Terraform, Vault, Git, Splunk, OWASP, Trend Micro, Palo Alto, Fortify, Twistlock, Aqua Security. Rego Language, OPA architecture, Agentic, AI, ML
• AWS Infrastructure Scripting – CloudFormation, AWS CLI, AWS CDK
• AWS Storage Services – S3
• AWS Compute Services – Lambda, EC2, EKS, ECS, ECR
• AWS Networking Services – VPC, Route53, API Gateway, Direct Connect
• AWS Developer Services – CodePipeline, CodeBuild, CodeCommit, CodeDeploy
• AWS Management and Governance Services – Control Tower, Organizations, CloudWatch, Auto Scaling, Config, CloudTrail, Service Catalog, Systems Manager
• AWS Security, Identity, Compliance Services – IAM, Inspector, KMS, Secrets Manager, Security Hub, Detective, GuardDuty, Macie, HSM, Certificate Manager, WAF & Shield, Firewall Manager, Detective
• Application security engineering (vulnerability validation)
• Secure sandboxing and isolated code execution
• LLM application development
• Agentic tooling engineering
• AWS Frameworks – Landing Zone

Benefits

• Full-time employment
• Remote work
• 2 days hybrid to NY/NJ offices

Company Overview

Company H1B Sponsorship