Cloud and Devops Security Engineer

Kodiak Solutions

18d • Remote

About The Position

At Kodiak Solutions, the Cloud and Devops Security Engineer partners directly with Product Engineering, DevOps, platform engineering, architecture, and IT teams. The role integrates security into cloud architecture, infrastructure as code, CI/CD pipelines, and production release processes. The engineer helps teams design, implement, test, and validate practical remediations, and participates in the security on-call rotation, incident management, and broader security engineering activities as part of a collaborative team.

Kodiak Solutions provides technology-driven solutions for healthcare finance, unclaimed property, risk management, and revenue cycle management. Its cloud-based systems, automated workflows, and data management tools aim to help healthcare organizations streamline financial operations and improve outcomes.

Essential duties may include the responsibilities listed below, as well as other assigned duties.

Requirements

• At least 5 years of experience in DevOps, cloud engineering, security engineering, or a related technical field.
• Bachelor's degree in Computer Science, Information Security, Engineering, or equivalent practical experience.
• Experience securing Microsoft Azure environments and implementing security controls within engineering workflows.
• Strong knowledge of cloud security architecture, including identity, networking, containers, storage, key management, logging, and monitoring.
• Experience with CI/CD platforms, source control, and DevSecOps practices.
• Proficiency with Infrastructure as Code and automation tools such as Terraform, Bicep, PowerShell, Python, or similar technologies.
• Experience with application, cloud, container, API, and infrastructure security testing tools.
• Knowledge of Kubernetes, container security, vulnerability management, and cloud security best practices.
• Familiarity with secure software development frameworks such as OWASP, NIST SSDF, and CIS Benchmarks.
• Experience supporting security incident response, investigations, and remediation activities.
• Must be legally authorized to work in the United States; employment visa sponsorship is not available now or in the future.

Nice To Haves

• Relevant cloud, security, or DevOps certifications.

Responsibilities

• Integrate security controls, testing, and policy enforcement into CI/CD pipelines and cloud-native development processes.
• Partner with engineering teams to design, build, and maintain secure, resilient cloud infrastructure and application environments.
• Assess and strengthen the security of cloud platforms, identities, networks, containers, Kubernetes environments, and data protection controls.
• Develop and maintain security automation using Infrastructure as Code (IaC), Policy as Code (PaC), and DevSecOps tools.
• Perform threat modeling, architecture reviews, vulnerability assessments, and security testing to identify and mitigate risk.
• Drive remediation efforts by investigating security findings, implementing corrective actions, and validating resolution effectiveness.
• Support incident response, vulnerability management, security monitoring, and continuous improvement of the organization's security posture.
• Develop security standards, reference architectures, technical guidance, and reusable controls, and communicate risks and recommendations to stakeholders.
• Participate in the security on-call rotation and incident management.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior