#607 - DevOps Security Engineer (Trust Infra - Replacement)
BlueCloud Services, Inc.BlueCloud is a Snowflake Elite Partner and the 2026 CoCo Catalyst Snowflake Partner of the Year. We help enterprise organizations move from fragmented legacy systems to unified, AI-ready Snowflake platforms — delivering data migration, engineering, governance, BI & analytics, and AI/ML solutions 40–50% faster than traditional approaches.
With 450+ Snowflake consultants, 200+ enterprise transformations under our belt, and a 100% Snowflake focus, we combine advisory-led thinking with AI-powered accelerators to turn months of work into weeks of results. Our clients span Financial Services, Healthcare & Life Sciences, Retail, Manufacturing, Energy, and more — and the outcomes speak for themselves: 97% faster reports, 40% fraud reduction, $1.5M in client savings, and 10× client growth.
We don't just strategize — we execute.
About the Role
We’re looking for an experienced DevOps Security Engineering contractor to help build and operate the foundational security and reliability tooling that empowers engineering teams of our client. This role blends security best practices, cloud infrastructure engineering, and DevOps automation to ensure that our client's internal platforms are secure, scalable, and highly available.
The Trust Infra team exists to elevate the security posture of our client's infrastructure and services by embedding security in everything from provisioning to deployment, improving developer experience through automation, and building guardrails that enable safe, rapid delivery. Artifacts owned by this team include our client's secrets management system, authentication and authorization, cryptography, certificate workloads, and other core security components within their Kubernetes and cloud infrastructure.
Key Responsibilities
Secure Infrastructure & Engineering
● Design, implement, and maintain security-focused tooling and guardrails for infrastructure and service provisioning.
● Collaborate with security engineering, SRE, and platform teams to ensure trust principles are integrated across the engineering lifecycle.
● Implement best practices for secrets management, certificate lifecycle automation, and identity/authentication controls.
Cloud-Native Infrastructure
● Lead the design and improvement of AWS-native architectures that support secure, scalable, and resilient services.
● Apply Infrastructure as Code (Terraform) to standardize and enforce consistent infrastructure patterns.
● Manage Kubernetes cluster resource configurations, Helm charts, and Operator patterns to automate safe deployments.
Developer Enablement & Tooling
● Build internal tools and automation that reduce cognitive load for developers while enforcing security standards.
● Partner with platform and developer productivity teams to streamline onboarding, deploy pipelines, and self-service capabilities.
● Monitor, observe, and alert on infrastructure health, compliance drift, and policy violations.
● Design, implement, and maintain security-focused tooling and guardrails for infrastructure and service provisioning.
● Collaborate with security engineering, SRE, and platform teams to ensure trust principles are integrated across the engineering lifecycle.
● Implement best practices for secrets management, certificate lifecycle automation, and identity/authentication controls.
Cloud-Native Infrastructure
● Lead the design and improvement of AWS-native architectures that support secure, scalable, and resilient services.
● Apply Infrastructure as Code (Terraform) to standardize and enforce consistent infrastructure patterns.
● Manage Kubernetes cluster resource configurations, Helm charts, and Operator patterns to automate safe deployments.
Developer Enablement & Tooling
● Build internal tools and automation that reduce cognitive load for developers while enforcing security standards.
● Partner with platform and developer productivity teams to streamline onboarding, deploy pipelines, and self-service capabilities.
● Monitor, observe, and alert on infrastructure health, compliance drift, and policy violations.
Qualifications
Must-Haves
● 5+ years of hands-on experience operating Kubernetes and Security workloads in production environments.
● Deep expertise of Kubernetes resource management, Helm charts, and operator patterns, centered around security workload.
● Strong understanding of Helm, including templating, dependency management, and release lifecycle practices.
● Advanced troubleshooting skills for distributed systems using observability tools such as Prometheus, Grafana, and tracing systems.
● Proven ability to execute complex infrastructure migrations with minimal service disruption.
Nice-to-Haves
● Familiarity with CNCF ecosystem tooling and GitOps-based deployment models.
● Prior experience designing and implementing secure infrastructure guardrails on Kubernetes (external-secrets-operator, cert-manager).
● Bachelor’s degree in Computer Science, Engineering, or equivalent practical experience.
● 5+ years of hands-on experience operating Kubernetes and Security workloads in production environments.
● Deep expertise of Kubernetes resource management, Helm charts, and operator patterns, centered around security workload.
● Strong understanding of Helm, including templating, dependency management, and release lifecycle practices.
● Advanced troubleshooting skills for distributed systems using observability tools such as Prometheus, Grafana, and tracing systems.
● Proven ability to execute complex infrastructure migrations with minimal service disruption.
Nice-to-Haves
● Familiarity with CNCF ecosystem tooling and GitOps-based deployment models.
● Prior experience designing and implementing secure infrastructure guardrails on Kubernetes (external-secrets-operator, cert-manager).
● Bachelor’s degree in Computer Science, Engineering, or equivalent practical experience.
We are looking for someone who is experienced in building lasting relationships and is passionate about making meaningful contributions to our team. Don't be mistaken, this is a challenging career path but also highly rewarding. Are you up for the challenge? If so, stop reading and start applying.