Sr. DevSecOps Engineer- Reliability & Security (Remote from Bulgaria)
Company:Smartsheet
Location:Bulgaria
Languages:English
Seniority level:Senior, 8+ years in technology, at least 5 years in a senior role
Experience:8+ years in technology, at least 5 years in a senior role
Skills:
AWSLeadershipPythonCloud ComputingCybersecurityKubernetesRubyGoCI/CDLinuxDevOpsTerraformMentoringCompliance
Requirements:
- 8+ years of progressive experience in technology, with at least 5 years in a hands-on senior role (SRE, DevOps, or Security Engineering).
- BS or MS in Computer Science, Engineering, or related field, or equivalent industry experience.
- Expert-level proficiency in at least one major cloud provider, preferably AWS, with deep knowledge of core infrastructure and security services.
- Expert-level proficiency with Infrastructure as Code, particularly Terraform.
- Expert-level proficiency in a scripting or programming language such as Python, Go, or Ruby.
- Deep experience with containerization and orchestration technologies (Kubernetes), including securing containerized environments.
- Proficiency with modern security operations toolchain (SIEM, EDR, vulnerability scanning).
- Experience integrating security tools (SAST, DAST, SCA) into CI/CD pipelines.
- Critical thinker with proven ability to troubleshoot complex problems in high-pressure production environments.
- Excellent verbal and written communication skills and a collaborative spirit.
Responsibilities:
- Design, build, maintain, and improve secure, scalable, and highly available infrastructure (primarily AWS) using IaC (Terraform, Kubernetes, Helm).
- Engineer and automate threat detection, incident response, and vulnerability management.
- Architect and secure CI/CD pipelines, integrating automated security tooling (SAST, DAST, SCA).
- Manage, operate, and secure Kubernetes, implementing container security best practices.
- Act as a technical lead during security and reliability incidents, driving resolution and conducting post-mortems.
- Implement and automate technical controls for compliance with frameworks like FedRAMP, SOC 2, and ISO 27001.
- Serve as a subject matter expert, mentoring engineers and championing operational excellence and security ownership.
