As our DevOps & Security Engineer, you'll own how Vantage DX and MPA are built, deployed, and secured. That means running the CI/CD pipelines, hardening our AWS and Azure environments, and driving vulnerability remediation. You'll also supply the technical evidence behind our compliance commitments.
This is a hands-on role at a small company, so you'll own a lot and your impact will be easy to see.
Key Responsibilities
Build, test automation, release, and deployment
- Own CI/CD pipelines, build infrastructure, & release automation covering cloud-hosted and on-premises delivery
- Maintain infrastructure as code & keep dev & production environments consistent
- Make releases repeatable, auditable, fast, and propose & deliver the build, test automation, and deployment improvements each product needs
- Remove verification bottlenecks that come with higher AI-driven code volume: automated security and quality gates on pull requests, AI-assisted review that feeds human review
- Help teams scale automated UI and regression testing (e.g. Playwright), so testing capacity grows with output.
- Implement technical controls for AI coding tools, such as secrets scanning, license and provenance checks, & audit logging
- Report delivery-flow metrics: pull request size, time to review, test cycle time, & escaped defects
Production monitoring and reliability
- Run monitoring, alerting, & incident response for production services
- Lead root cause analysis & lessons learned after customer-impacting events
- Track & improve deployment frequency, change failure rate, & mean time to recovery
Hosting and network security
- Secure cloud hosting, with AWS and Azure including
identity and access, secrets
management, network segmentation, firewall
and WAF rules, TLS, backups, and hardening
- Identity and access management including Keycloak single sign-on, OAuth/OIDC, and JWT handling
- Secrets handling, least-privilege access, safe processing of data
- Monitor services with OpenTelemetry, & track usage and cost
- Review network security configuration on a regular schedule & fix drift
- Run cloud infrastructure behind our applications: Kubernetes, Terraform, Docker, & cloud-init deployments, nginx, & scheduled jobs
- Experience operating LLM or AI agent workloads, AWS Bedrock,
AgentCore, cost monitoring & guardrails
- Operate the vulnerability lifecycle across code, dependencies, & containers: scan, triage, and report. Set risk-based prioritization and severity-based remediation timelines, & drive down time to remediate
- Supply the technical evidence behind compliance work, such as scan results, remediation records, and SBOMs, for EU Cyber Resilience Act (CRA) reporting & customer security questionnaires
- Serve on the incident response team & the 24-hour on-call rotation
Required Qualifications
- 5+ years in DevOps, site reliability, or platform engineering
- Hands-on CI/CD (e.g., GitHub Actions), containers, & infrastructure as code e.g., Terraform with experience delivering both cloud and on-premises software
- Deep production experience hosting and securing workloads on AWS (e.g, IAM, CloudFront, ALB, S3, and SSM, nginx, kubernetes)
- Working knowledge of vulnerability management: code, dependency, and container scanning (e.g.,
Trivy, Dependabot), triage, and remediation, including risk-based prioritization (e.g. severity scoring combined with exploitability data)
- Network security fundamentals: segmentation, firewalls and WAF, TLS, VPN, least-privilege access
- Production monitoring, on-call, incident response, and root cause analysis experience
- Scripting and automation in Python, Bash, or PowerShell
- Exposure to compliance frameworks such as CRA, SOC 2 or ISO 27001
