[Hiring] DevSecOps Engineer @Istari Digital

Role Description

We are seeking a DevSecOps Engineer to join our Engineering team. This role is critical to securing, hardening, and scaling the infrastructure that powers our platform across cloud-hosted production environments. This engineer will work closely with platform, infrastructure, and security stakeholders to improve the security and operational maturity of our AWS and Kubernetes environments, support compliance and audit readiness, and help ensure our systems are reliable, secure, and maintainable as we grow. This role will also support environments serving regulated and security-sensitive customer needs, including an environment we host for a Government organization.

The ideal candidate combines strong hands-on infrastructure expertise with sound security judgment and a practical, execution-focused mindset. They should be comfortable working across cloud infrastructure, Kubernetes, operating systems, compliance controls, and production operations.

Qualifications

• Minimum of 5 years of experience in DevOps, DevSecOps, Infrastructure Engineering, Platform Engineering, or Security Engineering
• Strong hands-on experience with AWS in production environments
• Proven experience with Kubernetes, preferably in production
• Strong experience with Terraform and infrastructure-as-code practices
• Experience hardening production environments and implementing secure configuration standards
• Experience supporting compliance frameworks, audit preparation, evidence gathering, and control validation
• Experience with vulnerability remediation, system patching, and operational security practices
• Experience configuring and maintaining both Linux and Windows virtual machines
• Strong understanding of IAM, secrets management, network security, logging, monitoring, and operational controls
• Proven experience improving or securing CI/CD pipelines and deployment workflows
• Excellent troubleshooting and problem-solving skills in complex production environments
• Strong communication skills with the ability to explain technical concepts to both technical and non-technical stakeholders
• Must live/work in the U.S.

Requirements

• Experience supporting environments with regulated, compliance-driven, or security-sensitive requirements
• Familiarity with compliance or security frameworks such as SOC 2, NIST, ISO 27001, CMMC, or similar
• Experience with EKS or other managed Kubernetes platforms
• Experience configuring or supporting Active Directory Domain Services, Group Policy, or hybrid identity environments
• Experience with automation and configuration management tools such as Ansible, PowerShell, or similar
• Experience with PostgreSQL, cloud storage platforms, and production networking patterns
• Scripting experience in Python, Bash, or PowerShell
• Experience with security tooling related to container security, vulnerability management, or policy enforcement
• Experience supporting customer-facing or mission-critical production infrastructure
• Security+ Certification
• Top Secret Security Clearance

Benefits

• $135,000 - $220,000 a year
• The anticipated compensation range for this position may vary based on experience, skills, qualifications, location, and business needs.
• In addition to base salary, this role may be eligible for bonuses, equity, and a comprehensive benefits package.

Company Description

Istari is a digital engineering software company building open, scalable infrastructure for engineering data. Our platform lets customers simply and securely integrate engineering models across disciplines, organizations, and security levels — whether they're designing prototypes, performing virtual testing, or training AI and autonomy for complex systems.

• Focus is rewarded. Finish is remembered.
• Facts are friendly. Even when they are not fun.
• Fellowship is fundamental. Make others successful.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.