[Remote] DevOps Engineer

Note: The job is a remote job and is open to candidates in USA. Ciphertext Solutions, Inc. builds secure, scalable financial technology solutions enabling digital innovation for banks, credit unions, and fintech partners. They are seeking a DevSecOps Engineer to help secure, automate, and operate the infrastructure and delivery pipelines that power their fintech platform, focusing on cloud infrastructure, software delivery, security engineering, and compliance.ResponsibilitiesHelp design, implement, and maintain secure cloud infrastructure primarily in Google Cloud Platform (GCP)Manage and improve infrastructure as code using Terraform and related automation toolingStrengthen network security controls including firewalls, routing, segmentation, VPNs, and secure connectivity between systems and partnersSupport certificate lifecycle management, secrets handling, and secure configuration management across environmentsPartner with engineering teams to improve environment consistency, hardening, and operational resilienceEmbed security practices throughout the software development lifecycle, from design through deployment and operationsImprove and maintain CI/CD pipelines with a focus on secure build and release processes, automated checks, and deployment reliabilityHelp implement secure coding guardrails, dependency management, and practical application security controls aligned with OWASP guidanceCollaborate with developers to reduce security risk early by supporting threat modeling, security reviews, and remediation planningContribute to automation that improves delivery quality, repeatability, and auditabilityMonitor systems and security tooling to identify vulnerabilities, suspicious activity, misconfigurations, and operational risksInvestigate, document, and help remediate security incidents and operational issuesParticipate in root-cause analysis and post-incident improvement efforts to reduce repeat issuesSupport on-call or after-hours response when urgent security or infrastructure issues ariseSupport security and compliance initiatives related to SOC 2, PCI DSS, and internal control requirementsHelp maintain policies, procedures, technical documentation, and operational runbooks related to infrastructure and security practicesAssist in evidence collection, control validation, and remediation tracking for audits and certificationsPerform risk assessments, security reviews, and infrastructure audits as neededWork closely with software engineers, product stakeholders, and leadership to align infrastructure and security improvements with business prioritiesEducate team members on secure development, operational hygiene, and security awareness where appropriateContribute to engineering best practices around automation, observability, reliability, and secure system designPresent findings, recommendations, and status updates clearly to technical and non-technical stakeholdersSkillsBachelor's degree in computer science, cybersecurity, information systems, or a related field, or equivalent practical experience5+ years of experience in DevOps, DevSecOps, cloud infrastructure, security engineering, or a closely related roleStrong hands-on experience with Google Cloud Platform (GCP), Linux administration, and infrastructure automationProfessional experience with Terraform, shell scripting, Git-based workflows, and CI/CD pipelinesStrong understanding of networking fundamentals including firewalls, routing, subnetting, and site-to-site VPNsExperience securing cloud-native environments and supporting production infrastructure in high-availability systemsFamiliarity with security best practices across the software development lifecycle, including secure configuration, secrets management, and vulnerability remediationWorking knowledge of compliance and control frameworks such as SOC 2 and PCI DSSExperience investigating incidents, supporting root-cause analysis, and improving operational controlsStrong communication skills and the ability to work effectively across engineering, product, and leadership teamsHigh degree of ownership, sound judgment, and the ability to work calmly under pressureExperience with Palo Alto Networks firewalls or comparable network security platformsKnowledge of Java-based application environments and how infrastructure/security concerns intersect with backend servicesFamiliarity with application security tooling, dependency scanning, IaC scanning, or container/image security practicesExperience with PKI, TLS, certificate management, and cryptographic protocols in production systemsExposure to observability and monitoring platforms for logs, metrics, tracing, and alertingRelevant certifications such as CISSP, CCSP, Security+, Google Cloud certifications, or similarExperience working in fintech, payments, banking, or other regulated environmentsFamiliarity with incident response processes, audit readiness, and evidence-based compliance operationsBenefitsCompetitive compensation and a flexible remote work environment.Company OverviewLeading-edge provider of digital-first card services offering real-time digital engagement to issuers transforming their card program. It was founded in 2016, and is headquartered in Saddle Brook, New Jersey, USA, with a workforce of 11-50 employees. Its website is https://ciphertextsolutions.com/.Company H1B SponsorshipCiphertext Solutions has a track record of offering H1B sponsorships, with 1 in 2024. Please note that this does not guarantee sponsorship for this specific role.