Staff DevSecOps Engineer – Cloud Security & Automation

About the role

Shield AI’s Cloud Engineering team builds and operates the infrastructure that powers its autonomous systems. As a Staff DevSecOps Engineer you will design, implement, and automate security controls across AWS, container workloads, and CI/CD pipelines. This hands‑on role focuses on making secure configurations repeatable while minimizing friction for development teams.

Key responsibilities

• Design and implement security controls across AWS infrastructure and platform services.
• Build and maintain hardened container and base images for engineering and production workloads.
• Integrate vulnerability, dependency, container, and configuration scanning into software delivery pipelines.
• Automate security and compliance checks to reduce manual effort and improve consistency.
• Implement secrets management, identity, and access controls across cloud and engineering systems.
• Develop mechanisms for audit evidence, configuration validation, and compliance reporting.
• Identify security weaknesses in infrastructure, containers, and delivery systems and drive remediation with owning teams.
• Define reusable security patterns and promote adoption across multiple engineering teams.

Required profile

• 5+ years of experience as a Senior Engineer or 7+ years as a Staff Engineer in cloud security.
• Proven experience implementing security controls in AWS or another major cloud environment.
• Strong background with infrastructure‑as‑code and automated provisioning.
• Experience securing containerized workloads and building hardened images.
• Hands‑on experience integrating security tooling into CI/CD or software delivery systems.
• Ability to diagnose security and configuration issues across infrastructure, containers, and platform services.

Required skills

• AWS
• Infrastructure‑as‑code (e.g., Terraform, CloudFormation)
• Docker and Kubernetes security
• CI/CD pipeline integration
• Vulnerability, dependency, and container scanning
• Identity and access management, secrets management
• Python, Go, Bash scripting