Senior DevSecOps Engineer – Access Control Design Overhaul

Harbor Softworks

Contract · Remote · Flexible hours

About the role

Harbor Softworks is building a unified integration layer called "PulseBridge" to connect its billing platform, CRM system, and internal micro‑services. As a Senior DevSecOps Engineer you will own the security‑focused CI/CD pipelines that deliver PulseBridge, ensuring seamless, auditable data flow across all touchpoints.

Key responsibilities

• Design and implement Terraform‑based IaC for AWS environments supporting the integration APIs.
• Configure GitHub Actions with Snyk and Trivy scans to automatically gate code changes.
• Containerize legacy billing services using Docker, embed runtime security policies with Falco.
• Set up centralized logging and alerting in CloudWatch for credential leakage and anomalous API calls.
• Collaborate with the CRM team to embed OIDC token validation in the API gateway.
• Deliver a hardened release checklist and conduct a post‑deployment security review for each sprint milestone.

Must-have skills

• Advanced experience with AWS (ECS, Lambda, IAM) and Terraform.
• Deep knowledge of CI/CD tooling (GitHub Actions, Jenkins) and container security.
• Proficiency in scripting (Python/Bash) for automation and compliance checks.
• Hands‑on expertise with vulnerability scanning tools (Snyk, Trivy, Falco).
• Strong understanding of API security standards (OAuth2, OIDC, JWT).

Nice to have

• Experience with Service Mesh security (Istio, Linkerd).
• Familiarity with compliance frameworks such as PCI‑DSS.