Lead DevOps
Overview
We are seeking a Senior DevSecOps Engineer to own and continuously improve the security, reliability, observability, and cost efficiency of our cloud and edge infrastructure. This role will lead the configuration and management of Cloudflare (WAF, CDN, rules, logging) and drive
AWS security, governance, and cost optimization, while advancing our monitoring, alerting, and incident response practices across multiple observability platforms.
This is a hands-on, senior individual contributor role with strong influence over architecture, standards, and operational excellence.
Key Responsibilities
Cloudflare & Edge Security
Configure, manage, and optimize Cloudflare services including:
Web Application Firewall (WAF)
CDN and caching strategies
Firewall rules, rate limiting, bot management, and custom rules
Analyze Cloudflare logs to identify:
Security threats and attack patterns
Performance bottlenecks
False positives and rule tuning opportunities
Partner with engineering teams to safely expose APIs and customer-facing endpoints
AWS Security, Governance & Cost Optimization
Own AWS security posture, including:
IAM best practices and least-privilege access
Network security (VPCs, security groups, NACLs)
Encryption, key management, and compliance controls
Drive AWS cost optimization initiatives:
Analyze usage patterns and spend
Recommend and implement savings strategies (e.g., right-sizing, reservations, architectural improvements)
Establish and maintain security and operational standards across AWS accounts and environments
Observability, Logging & Monitoring
Design, optimize, and maintain centralized logging and observability across:
Amazon CloudWatch
New Relic
Sumo Logic
Cloudflare
Improve signal-to-noise ratio by:
Reducing redundant or low-value logs
Standardizing log formats and metadata
Build and refine dashboards, alerts, and SLO/SLI-based monitoring to improve system visibility and reliability
Incident Response & Operational Excellence
Create, document, and continuously improve
incident response processes, including:
Detection, escalation, and communication
Root cause analysis and post-incident reviews
Act as a senior responder for security and availability incidents
Drive preventative improvements based on incident learnings
Partner with engineering and product teams to embed security and reliability earlier in the development lifecycle
Required Qualifications
7+ years of experience in DevOps, SRE, or DevSecOps roles
Deep, hands-on experience with AWS in production environments
Strong experience managing Cloudflare, including WAF and rule-based security
Proven experience with observability platforms such as:
CloudWatch
New Relic
Sumo Logic
Strong understanding of:
Web security principles (OWASP Top 10, DDoS mitigation, API security)
Networking fundamentals (HTTP, TLS, DNS)
Experience creating and improving operational processes and runbooks
Ability to analyze logs and metrics to drive actionable improvements
Strong written communication skills for documentation, incident reports, andrecommendations
Preferred / Nice-to-Have Qualifications
Experience with infrastructure as code (Terraform, CloudFormation, etc.)
Familiarity with eCommerce or high-traffic, customer-facing systems
Experience working with CI/CD pipelines and secure deployment practices
Knowledge of compliance or regulatory frameworks (PCI, SOC 2, etc.)
Experience mentoring engineers or acting as a technical leader
What Success Looks Like
Cloudflare rules are well-tuned, effective, and low-noise
AWS environments are secure, cost-efficient, and consistently governed
Logs, dashboards, and alerts provide clear, actionable insights
Incidents are detected earlier, resolved faster, and recur less often
Security and reliability are embedded into everyday engineering workflows
We are seeking a Senior DevSecOps Engineer to own and continuously improve the security, reliability, observability, and cost efficiency of our cloud and edge infrastructure. This role will lead the configuration and management of Cloudflare (WAF, CDN, rules, logging) and drive
AWS security, governance, and cost optimization, while advancing our monitoring, alerting, and incident response practices across multiple observability platforms.
This is a hands-on, senior individual contributor role with strong influence over architecture, standards, and operational excellence.
Key Responsibilities
Cloudflare & Edge Security
Configure, manage, and optimize Cloudflare services including:
Web Application Firewall (WAF)
CDN and caching strategies
Firewall rules, rate limiting, bot management, and custom rules
Analyze Cloudflare logs to identify:
Security threats and attack patterns
Performance bottlenecks
False positives and rule tuning opportunities
Partner with engineering teams to safely expose APIs and customer-facing endpoints
AWS Security, Governance & Cost Optimization
Own AWS security posture, including:
IAM best practices and least-privilege access
Network security (VPCs, security groups, NACLs)
Encryption, key management, and compliance controls
Drive AWS cost optimization initiatives:
Analyze usage patterns and spend
Recommend and implement savings strategies (e.g., right-sizing, reservations, architectural improvements)
Establish and maintain security and operational standards across AWS accounts and environments
Observability, Logging & Monitoring
Design, optimize, and maintain centralized logging and observability across:
Amazon CloudWatch
New Relic
Sumo Logic
Cloudflare
Improve signal-to-noise ratio by:
Reducing redundant or low-value logs
Standardizing log formats and metadata
Build and refine dashboards, alerts, and SLO/SLI-based monitoring to improve system visibility and reliability
Incident Response & Operational Excellence
Create, document, and continuously improve
incident response processes, including:
Detection, escalation, and communication
Root cause analysis and post-incident reviews
Act as a senior responder for security and availability incidents
Drive preventative improvements based on incident learnings
Partner with engineering and product teams to embed security and reliability earlier in the development lifecycle
Required Qualifications
7+ years of experience in DevOps, SRE, or DevSecOps roles
Deep, hands-on experience with AWS in production environments
Strong experience managing Cloudflare, including WAF and rule-based security
Proven experience with observability platforms such as:
CloudWatch
New Relic
Sumo Logic
Strong understanding of:
Web security principles (OWASP Top 10, DDoS mitigation, API security)
Networking fundamentals (HTTP, TLS, DNS)
Experience creating and improving operational processes and runbooks
Ability to analyze logs and metrics to drive actionable improvements
Strong written communication skills for documentation, incident reports, andrecommendations
Preferred / Nice-to-Have Qualifications
Experience with infrastructure as code (Terraform, CloudFormation, etc.)
Familiarity with eCommerce or high-traffic, customer-facing systems
Experience working with CI/CD pipelines and secure deployment practices
Knowledge of compliance or regulatory frameworks (PCI, SOC 2, etc.)
Experience mentoring engineers or acting as a technical leader
What Success Looks Like
Cloudflare rules are well-tuned, effective, and low-noise
AWS environments are secure, cost-efficient, and consistently governed
Logs, dashboards, and alerts provide clear, actionable insights
Incidents are detected earlier, resolved faster, and recur less often
Security and reliability are embedded into everyday engineering workflows