DevSecOps / Cloud Security Engineer

Vermont Information Processing is a technology provider to the beverage industry, delivering route accounting, warehouse, delivery, and sales platforms. The DevSecOps / Cloud Security Engineer will own software delivery security, release pipeline security, and cloud security, operationalizing security controls across AWS environments and mentoring a junior engineer.

Responsibilities:

• Secure release pipeline: make code-security scanning (SAST/SCA) a required, low-friction gate in CI/CD across our development teams; introduce automated application testing (DAST) and secrets scanning
• Cloud security framework rollout: operationalize our 15-domain, cloud-agnostic framework and CrowdStrike CSPM across all AWS estates (VIP-core, VIP India, acquired units), misconfiguration burn-down, guardrails, and workflow integration
• Cloud identity & access: centralize AWS access through Okta, eliminate local credentials, and implement least-privilege roles; define the tagging standard so every resource has an owner and classification
• Secrets & data protection: stand up managed secrets with rotation (replacing env-var and ad-hoc storage), encryption-at-rest verification, and support the data-leak-prevention rollout beyond email
• Resilience engineering: configure tamper-proof (immutable) backup tiers on our Rubrik platform and help define recovery-time objectives with IT
• Enablement & mentorship: build paved-road patterns and developer guidance; grow our India-based junior cloud security engineer; extend the framework to newly acquired units

Requirements:

• 5+ years across DevOps/platform and security engineering, with real ownership of CI/CD systems (Jenkins, Bitbucket/Git-based pipelines) and AWS
• Hands-on with SAST/DAST/SCA tooling and the craft of introducing gates developers accept
• Strong AWS security depth: IAM, organizations/accounts, networking, KMS, and posture management tooling
• Infrastructure-as-code and automation fluency (Terraform/CloudFormation, Python)
• Collaborative style suited to distributed teams; comfortable mentoring and working across time zones
• Azure exposure (two of our acquired units run Azure)
• Experience with Okta-AWS federation, Rubrik or equivalent backup platforms, and container security
• AWS Security Specialty, CCSP, or GIAC cloud certifications