Cloud and Devops Security Engineering

Kodiak Solutions is hiring a Cloud and DevOps Security Engineer to integrate security into cloud architecture, infrastructure as code, CI/CD pipelines, and production releases. The role partners with engineering and IT teams to design and implement security controls, remediate findings, and support incident response and security improvements.

Responsibilities:

• Integrate security controls, testing, and policy enforcement into CI/CD pipelines and cloud-native development processes
• Partner with engineering teams to design, build, and maintain secure, resilient cloud infrastructure and application environments
• Assess and strengthen the security of cloud platforms, identities, networks, containers, Kubernetes environments, and data protection controls
• Develop and maintain security automation using Infrastructure as Code (IaC), Policy as Code (PaC), and DevSecOps tools
• Perform threat modeling, architecture reviews, vulnerability assessments, and security testing to identify and mitigate risk
• Drive remediation efforts by investigating security findings, implementing corrective actions, and validating resolution effectiveness
• Support incident response, vulnerability management, security monitoring, and continuous improvement of the organization's security posture
• Develop security standards, reference architectures, technical guidance, and reusable controls while effectively communicating risks and recommendations to stakeholders

Requirements:

• 5+ years of experience in DevOps, cloud engineering, security engineering, or a related technical field
• Bachelor's degree in Computer Science, Information Security, Engineering, or equivalent practical experience
• Experience securing Microsoft Azure environments and implementing security controls within engineering workflows
• Strong knowledge of cloud security architecture, including identity, networking, containers, storage, key management, logging, and monitoring
• Experience with CI/CD platforms, source control, and DevSecOps practices
• Proficiency with Infrastructure as Code (IaC) and automation tools such as Terraform, Bicep, PowerShell, Python, or similar technologies
• Experience with application, cloud, container, API, and infrastructure security testing tools
• Knowledge of Kubernetes, container security, vulnerability management, and cloud security best practices
• Familiarity with secure software development frameworks such as OWASP, NIST SSDF, and CIS Benchmarks
• Experience supporting security incident response, investigations, and remediation activities
• Candidates must be legally authorized to work in the United States
• This position is not eligible for employment visa sponsorship now or in the future
• Relevant cloud, security, or DevOps certifications