Staff Cloud DevSecOps Engineer

Stryker is seeking a Staff Cloud DevSecOps Engineer to support its multi-cloud platform. The role will maintain secure cloud foundations, observability and CI/CD systems, automate incident response, optimize production AWS/GCP workloads, and ensure compliance with SOC 2 and ISO 27001 controls.

Responsibilities:

• Design and maintain secure cloud foundations and shared platform services, including landing zones, IAM/service accounts, workload identity/OIDC, secrets management, network/security controls, and reusable Terraform modules
• Partner with DevOps and application teams to enable secure golden-pipeline deployments, troubleshoot infrastructure blockers, and ensure cloud services are provisioned through standardized, repeatable patterns
• Implement and maintain cloud security guardrails and policy-as-code, including controls such as Cloud Armor/WAF, least-privilege IAM, secrets rotation, vulnerability remediation, and infrastructure configuration standards
• Design, deploy, and maintain observability stacks (Prometheus/Grafana, CloudWatch, Stackdriver, Datadog, or similar)
• Build and manage CI/CD pipelines and infrastructure-as-code (Terraform, CloudFormation, Pulumi)
• Automate incident response with runbooks, chat-ops, and auto-remediation scripts (e.g., Lambda, Cloud Functions)
• Ensure logging, alerting, and backup configurations meet SOC 2 / ISO 27001 controls
• Document evidence for audit requests (access reviews, vulnerability scans, disaster-recovery drills)
• Participate in weekly on-call rotation (pager duty) and drive blameless incident retrospectives

Requirements:

• Bachelor's degree in Computer Science, Engineering, or related field
• 4+ years professional experience in cloud operations, SRE, or DevOps roles
• Hands-on experience with at least one major cloud provider (AWS, GCP, or Azure)
• Proficiency in scripting or programming (Python, PowerShell, Bash, or similar)
• Experience deploying and supporting monitoring/alerting platforms (Prometheus, Datadog, Grafana, New Relic, etc.)
• Travel Percentage: 10%
• Experience with enterprise IAM, workload identity/OIDC, secrets management, cloud security controls, and Terraform-based landing-zone/platform engineering
• Certifications: AWS SysOps Administrator, Google Cloud DevOps Engineer, or Azure Administrator Associate
• Familiarity with Kubernetes, service mesh, and distributed tracing (Jaeger, OpenTelemetry)