[Hiring] Cloud and Devops Security Engineering @Kodiak Solutions

Role Description

The Cloud and Devops Security Engineer has the responsibility of partnering directly with Product Engineering, DevOps, platform engineering, architecture, and IT teams. The role integrates security into cloud architecture, infrastructure as code, CI/CD pipelines, and production release processes. This engineer is expected to move beyond identifying control gaps by helping teams design, implement, test, and validate practical remediations. The role also participates in the security on-call rotation, incident management, and broader security engineering activities as part of a collaborative team.

• Integrate security controls, testing, and policy enforcement into CI/CD pipelines and cloud-native development processes.
• Partner with engineering teams to design, build, and maintain secure, resilient cloud infrastructure and application environments.
• Assess and strengthen the security of cloud platforms, identities, networks, containers, Kubernetes environments, and data protection controls.
• Develop and maintain security automation using Infrastructure as Code (IaC), Policy as Code (PaC), and DevSecOps tools.
• Perform threat modeling, architecture reviews, vulnerability assessments, and security testing to identify and mitigate risk.
• Drive remediation efforts by investigating security findings, implementing corrective actions, and validating resolution effectiveness.
• Support incident response, vulnerability management, security monitoring, and continuous improvement of the organization's security posture.
• Develop security standards, reference architectures, technical guidance, and reusable controls while effectively communicating risks and recommendations to stakeholders.

Qualifications

• 5+ years of experience in DevOps, cloud engineering, security engineering, or a related technical field.
• Bachelor's degree in Computer Science, Information Security, Engineering, or equivalent practical experience.
• Experience securing Microsoft Azure environments and implementing security controls within engineering workflows.
• Strong knowledge of cloud security architecture, including identity, networking, containers, storage, key management, logging, and monitoring.
• Experience with CI/CD platforms, source control, and DevSecOps practices.
• Proficiency with Infrastructure as Code (IaC) and automation tools such as Terraform, Bicep, PowerShell, Python, or similar technologies.
• Experience with application, cloud, container, API, and infrastructure security testing tools.
• Knowledge of Kubernetes, container security, vulnerability management, and cloud security best practices.
• Familiarity with secure software development frameworks such as OWASP, NIST SSDF, and CIS Benchmarks.
• Experience supporting security incident response, investigations, and remediation activities.
• Relevant cloud, security, or DevOps certifications preferred.

Requirements

• Candidates must be legally authorized to work in the United States.
• This position is not eligible for employment visa sponsorship now or in the future.