Senior DevOps Engineer

Tunnl is building a future where artificial intelligence enables organizations to connect meaningfully with the people who matter most. They are seeking a highly skilled, security-minded Senior DevOps Engineer to help design, build, and secure their cloud infrastructure and software delivery pipelines.

Responsibilities:

• Establish and enforce cloud security standards across AWS, including IAM, network segmentation, encryption, secrets management, and secure workload patterns
• Implement continuous security posture monitoring aligned to the AWS Well-Architected Framework and security best practices (e.g., CIS benchmarks, NIST guidance, ISO principles)
• Design automated guardrails for vulnerability management, patching, configuration drift detection, key rotation, and secrets lifecycle management
• Improve detection and response readiness through centralized logging, alerting, and security event workflows
• Own the technical engagement with security and data privacy auditors, serving as Tunnl’s primary point of contact for infrastructure, cloud security, and DevSecOps controls
• Architect and maintain CI/CD pipelines with built-in security scanning and enforcement (SAST/DAST, dependency scanning, IaC scanning, artifact signing, policy-as-code)
• Implement repeatable, secure infrastructure deployment using Infrastructure-as-Code (Terraform and/or equivalent tooling)
• Build and maintain containerized and cloud-native deployment environments (Docker, Kubernetes and/or ECS/Fargate) with hardened images, runtime controls, and supply chain protections
• Improve developer experience by making secure workflows easy, fast, and consistent across engineering teams
• Help define and implement standards for availability, backup/restore, disaster recovery, and operational maturity
• Partner with engineering leadership to evolve incident response practices including on-call readiness, runbooks, and post-incident learning loops
• Proactively identify reliability/security risks, prioritize remediation, and drive cross-team follow-through
• Partner across software, data, and cyber teams to ensure security requirements are integrated into system design and delivery
• Serve as a trusted advisor to engineering leadership on cloud security strategy, risk tradeoffs, and platform evolution
• Coach engineers on DevOps patterns, secure-by-default architecture, and operational excellence
• Communicate clearly with both technical and non-technical stakeholders to build trust and adoption of platform/security initiatives
• Contribute to Tunnl’s mission and culture through principled execution, respectful collaboration, and high ownership

Requirements:

• 5+ years of experience in Cloud Engineering, DevOps, SRE, Platform Engineering, or DevSecOps, with strong focus on security and automation
• Demonstrated senior-level ownership of cloud infrastructure and CI/CD systems supporting production workloads
• Deep knowledge of AWS core infrastructure and security services (e.g., IAM, VPC, EC2, RDS, DynamoDB, Lambda, SQS/SNS, ECS/ECR, CloudTrail, Config, Security Hub, Inspector)
• Strong knowledge of IAM design, network security controls, encryption systems (KMS, key rotation), secrets management, and secure service-to-service access patterns
• Experience implementing vulnerability scanning and compliance controls using tools such as Ethyca, Security Hub, Inspector, Aqua, Prisma, or similar
• Familiarity with container security, dependency security, and software supply chain security best practices
• Strong proficiency with Infrastructure-as-Code tooling such as Terraform (preferred), CloudFormation, CDK, or Ansible
• Proven ability to standardize environments and reduce human risk through automation
• Experience with SIEM/log aggregation and incident workflows, including Splunk or comparable systems
• Comfort supporting operational readiness through logs, traces, metrics, and post-incident analysis
• Strong scripting/programming ability (Python preferred) for automation, tooling, and integrations
• Experience with CI/CD tools (GitHub Actions, Jenkins, CodePipeline, or similar)
• Familiarity with observability tooling (Prometheus, Grafana, ELK/EFK, or equivalents)
• Strong Linux/Unix command-line skills and solid networking fundamentals (TCP/IP, DNS, VPNs, firewalls, load balancing)
• AWS certifications: Solutions Architect, Security Specialty, or DevOps Engineer – Professional
• Experience implementing Zero Trust principles and modern identity-driven security patterns
• Hands-on experience with cloud-native security architecture for microservices and serverless environments
• Background in security operations, incident response, and security program execution in regulated environments