Senior DevSecOps Engineer for Automated Cloud Security

Pinecrest Systems

Contract · Remote · Flexible hours

About the role

Pinecrest Systems is building a secure, real‑time analytics backbone for its operations teams. As a Senior DevSecOps Engineer you will own the security posture of the new AetherStream data pipeline, ensuring continuous delivery while protecting sensitive telemetry. This short‑term engagement focuses on integrating security controls directly into CI/CD and cloud infrastructure.

Key responsibilities

• Design and implement IaC security policies in Terraform for AWS EKS clusters supporting AetherStream.
• Integrate Snyk and Trivy scans into GitHub Actions pipelines to catch vulnerabilities in Docker images before deployment.
• Automate secret management with HashiCorp Vault and enforce least‑privilege IAM roles for data ingestion services.
• Set up real‑time security monitoring using AWS GuardDuty and CloudWatch dashboards for pipeline health.
• Conduct threat modeling workshops with data engineers and define remediation road‑maps for identified risks.
• Deliver a hardened CI/CD workflow that includes automated compliance checks against CIS AWS Foundations.

Must-have skills

• Extensive experience with AWS services (EKS, IAM, GuardDuty).
• Proficiency in Docker container security and image scanning tools.
• Deep knowledge of CI/CD pipelines (GitHub Actions, Jenkins) and IaC (Terraform, CloudFormation).
• Hands‑on expertise in secret management and zero‑trust network design.
• Strong scripting skills in Python or Bash for automation.

Nice to have

• Experience with data‑pipeline frameworks such as Apache Kafka or Flink.
• Familiarity with compliance standards like SOC 2 or ISO 27001.