DevSecOps Engineer

Blockgraph is looking for a DevSecOps Engineer to securely architect, manage, and enhance our cloud infrastructure and systems. This role is focused on improving security, service reliability, performance efficiency, and cost optimization. You will have the opportunity to lay out security strategies, implement best practices, introduce new tools, and design automation systems. You will be in a position to collaborate with and empower your peers to develop more secure, reliable, and scalable software. 

Our Environment 

• Our services are built as containers deployed and orchestrated on Kubernetes clusters running in AWS. 
• We utilize a number of AWS native and industry leading security services and tools across the Blockgraph ecosystem. 
• Most of Blockgraph's services are written in Java and Golang. 
• Our Infrastructure-as-Code tools of choice are Terraform and Helm. 
• We practice continuous integration using CircleCI. 
• When it comes to observability, we use an EFK stack for logging, and Prometheus and Grafana for metrics collection and visualization. 
• Our services' uptime is monitored with Alertmanager and Pingdom and we use PagerDuty for incident management. 

What you'll do 

• Build, manage, and secure cloud infrastructure including AWS services, Kubernetes clusters, CI/CD systems, databases, and software-defined networking. 
• Architect and implement the security processes and technology of all aspects of the Blockgraph cloud infrastructure. 
• Design and implement internal tools to improve our systems' and applications' performance, quality, delivery, and observability. 
• Troubleshoot and resolve performance and reliability issues and participate in incident response and serve as key technical point person for security incidents. 
• Improve security, scalability, and reliability through monitoring services and infrastructure. 
• Author documentation for mission critical systems and processes. 
• Work closely with the rest of the engineering team to productionize new and existing projects. 
• Participate in code reviews and architecture design decisions. 

 About you 

• You have 4+ years of development experience. 
• You have 2+ years of SecOps or related experience. 
• You have 2+ years in SRE/DevOps experience. 
• You are comfortable programming in at least one programming language. 
• You possess the ability to quickly learn new development languages and pick up new software, frameworks and APIs. 
• You understand how to implement technical security controls to secure cloud architecture, following security standards and frameworks such as NIST 800-171, DoD RMF, CMMC, etc. 
• You have experience implementing secure networks including usage of penetration testing tools to determine attack surface. 
• You are proficient with the Unix shell, and you love to automate your work. 
• You have experience with Infrastructure-as-Code. 
• You are an excellent communicator with a team-oriented demeanor. 
• You have a Bachelor's degree in Electrical and Computer Engineering, Computer Science or other STEM degree 

Bonus Skills / Nice to haves 

• Relevant industry certifications such as GIAC, Certified Ethical Hacker, AWS Solutions Architect, AWS DevSecOps Engineer, AWS Cloud Security Architect, etc. 
• Masters degree in a STEM field 

Annual Compensation Range: $120,000-$170,000. Actual compensation will be commensurate to the candidate's experience and can include additional compensation plans.