Note: The job is a remote job and is open to candidates in USA. The Planet Group is seeking a Senior DevSecOps Engineer to serve as a technical leader at the intersection of software development, security, and cloud infrastructure. This role focuses on building and securing cloud platforms that support the transmission, processing, and storage of data from connected IoT devices.
Responsibilities
- Design and implement secure cloud infrastructure for IoT data transmission, processing, and storage
- Develop secure authentication, encryption, and identity management solutions that protect data confidentiality, integrity, and availability
- Create and maintain Infrastructure as Code (IaC) modules that incorporate security best practices and regulatory requirements
- Ensure secure, encrypted communication between IoT devices and cloud services
- Implement network security controls to protect against threats such as unauthorized access, distributed denial-of-service (DDoS) attacks, and man-in-the-middle attacks
- Develop and maintain security controls for protecting data both in transit and at rest
- Secure the integration of cloud services supporting data ingestion, storage, and processing
- Implement and maintain identity and access management controls to ensure only authorized users and systems have access
- Manage secure APIs and authentication mechanisms between cloud platforms and enterprise applications
- Ensure cloud infrastructure aligns with industry security standards, including ISO 27001
- Conduct security assessments, compliance audits, and vulnerability reviews
- Maintain documentation supporting compliance and security governance initiatives
- Perform threat modeling and risk assessments across cloud environments
- Implement monitoring, alerting, and detection capabilities to identify and respond to security events
- Drive vulnerability remediation efforts and continuously improve the organization's security posture
- Partner with Cloud Engineering, DevOps, Infrastructure, and Security teams to embed security throughout the development lifecycle
- Mentor engineering teams on secure cloud architecture and DevSecOps best practices
- Promote security awareness through training and technical leadership
Skills
- 5+ years of experience securing cloud infrastructure in enterprise environments
- Strong knowledge of cloud security principles, identity and access management, encryption, TLS, and secure communication protocols
- Hands-on experience securing public cloud platforms such as AWS, Azure, or Google Cloud Platform (GCP)
- Experience with Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), container security, and vulnerability management
- Experience implementing Infrastructure as Code, preferably using Terraform
- Working knowledge of ISO 27001 or comparable cloud security frameworks
- Excellent communication skills with the ability to collaborate across engineering and security teams
- Professional security certifications such as CISSP, CCSP, GCSA, or cloud security certifications from AWS, Microsoft Azure, or Google Cloud
- Experience supporting industrial, manufacturing, or IoT cloud environments
- Strong understanding of DevSecOps automation and CI/CD security practices
Company Overview