# Staff DevSecOps Engineer

**Company:** [Shield AI](https://hotfix.jobs/companies/shield-ai)
**Location:** San Mateo, CA, San Diego, CA
**Role:** DevOps / SRE
**Salary:** $182k – $274k/yr
**Experience:** 7+ years
**Skills:** AWS, Infrastructure As Code, Docker, Kubernetes, CI/CD, Vulnerability Management, Dependency Scanning, Secrets Management, Identity And Access Management, Python, Go, Bash, Policy As Code, Cloud Security Posture Management, Supply Chain Security
**Posted:** 2026-09-03

> Staff DevSecOps Engineer designing and automating security controls across AWS infrastructure, containers, CI/CD, and platform services. Requires 7+ years of related experience plus expertise in cloud security, infrastructure as code, hardened images, vulnerability scanning, identity, and secrets management.

## Job Description

## Responsibilities
- Design and implement security controls across AWS infrastructure and platform services.
- Build and maintain hardened container and secure base images for engineering and production workloads.
- Integrate vulnerability, dependency, container, and configuration scanning into software delivery systems.
- Automate security and compliance checks to reduce manual review and improve consistency.
- Implement secrets management, identity, and access controls across infrastructure and engineering systems.
- Build mechanisms for audit evidence, configuration validation, and compliance reporting.
- Identify security weaknesses in infrastructure, containers, and delivery systems and drive remediation.
- Translate security requirements into scalable engineering controls with Cybersecurity and Infosec teams.
- Integrate security controls with Build Engineering and Cloud Engineering while maintaining reliability and developer productivity.
- Define reusable security engineering patterns and drive adoption across multiple teams.

## Requirements
- 7+ years of related experience for Staff Engineer, or equivalent education and experience.
- Experience implementing security controls in AWS or another major cloud environment.
- Experience with infrastructure as code and automated infrastructure provisioning.
- Experience securing containerized workloads and maintaining hardened container images.
- Experience integrating security tooling into CI/CD or software delivery systems.
- Experience with vulnerability management, dependency scanning, container scanning, or configuration validation.
- Experience implementing identity, secrets, and access controls in cloud or engineering environments.
- Experience automating security or infrastructure tasks using Python, Go, Bash, or a similar language.
- Ability to diagnose security and configuration issues across infrastructure, containers, and platform services.
- Experience collaborating with security and engineering teams to implement shared technical controls.

## Nice-to-haves
- Experience operating systems in regulated or compliance-driven environments.
- Experience with Kubernetes security, workload identity, or container runtime controls.
- Experience building reusable hardened images or secure infrastructure baselines used across multiple teams.
- Experience with cloud security posture management, policy as code, or automated compliance tooling.
- Experience supporting audit evidence collection or continuous compliance workflows.
- Familiarity with software supply-chain security, artifact integrity, or signing and attestation workflows.

## Similar jobs

- [Senior/Staff Kubernetes Infrastructure Engineer](https://hotfix.jobs/jobs/5276ef82-8104-4269-8e3f-7f0e02d35c2d) - Fal - Remote - $180k – $250k/yr
- [Staff Site Reliability Engineer](https://hotfix.jobs/jobs/87068331-357d-4049-9cef-b6b8edc93f79) - Attentive - Remote - $180k – $240k/yr
- [Sr. Staff Platform/Data Reliability Engineer, Databricks](https://hotfix.jobs/jobs/b1ca8d0a-2503-4891-8213-a0c0ca8c01ad) - Shield AI - Remote - $180k – $270k/yr
- [Senior Staff Infrastructure Engineer](https://hotfix.jobs/jobs/f99a2e1a-7c43-4a02-ba1c-9d76880c0acd) - VGS - Remote - $185k – $290k/yr
- [Staff Infrastructure Engineer](https://hotfix.jobs/jobs/63668c94-fd42-45fb-9699-5d39d126e387) - Komodo Health - Remote - $187k – $265k/yr

**Apply:** https://hotfix.jobs/jobs/593e5319-afa3-4408-bf94-a4885cd3c100
**Canonical:** https://hotfix.jobs/jobs/593e5319-afa3-4408-bf94-a4885cd3c100