Note: The job is a remote job and is open to candidates in USA. Kodiak Solutions is hiring a Cloud and DevOps Security Engineer to integrate security into cloud architecture, infrastructure as code, CI/CD pipelines, and production releases. The role partners with engineering and IT teams to design and implement security controls, remediate findings, and support incident response and security improvements.
Responsibilities
- Integrate security controls, testing, and policy enforcement into CI/CD pipelines and cloud-native development processes
- Partner with engineering teams to design, build, and maintain secure, resilient cloud infrastructure and application environments
- Assess and strengthen the security of cloud platforms, identities, networks, containers, Kubernetes environments, and data protection controls
- Develop and maintain security automation using Infrastructure as Code (IaC), Policy as Code (PaC), and DevSecOps tools
- Perform threat modeling, architecture reviews, vulnerability assessments, and security testing to identify and mitigate risk
- Drive remediation efforts by investigating security findings, implementing corrective actions, and validating resolution effectiveness
- Support incident response, vulnerability management, security monitoring, and continuous improvement of the organization's security posture
- Develop security standards, reference architectures, technical guidance, and reusable controls while effectively communicating risks and recommendations to stakeholders
Skills
- 5+ years of experience in DevOps, cloud engineering, security engineering, or a related technical field
- Bachelor's degree in Computer Science, Information Security, Engineering, or equivalent practical experience
- Experience securing Microsoft Azure environments and implementing security controls within engineering workflows
- Strong knowledge of cloud security architecture, including identity, networking, containers, storage, key management, logging, and monitoring
- Experience with CI/CD platforms, source control, and DevSecOps practices
- Proficiency with Infrastructure as Code (IaC) and automation tools such as Terraform, Bicep, PowerShell, Python, or similar technologies
- Experience with application, cloud, container, API, and infrastructure security testing tools
- Knowledge of Kubernetes, container security, vulnerability management, and cloud security best practices
- Familiarity with secure software development frameworks such as OWASP, NIST SSDF, and CIS Benchmarks
- Experience supporting security incident response, investigations, and remediation activities
- Candidates must be legally authorized to work in the United States
- This position is not eligible for employment visa sponsorship now or in the future
- Relevant cloud, security, or DevOps certifications
Benefits
- Remote
Company Overview