Senior DevOps Engineer

PAR Technology

10d • $135,500 - $175,000 • Remote

About The Position

PAR Technology is seeking a hands-on Senior DevOps Engineer to embed security into every stage of how we build, ship, and operate software. Sitting at the intersection of platform engineering and security, this role owns the tooling, automation, and guardrails that enable product teams to move quickly without compromising the trust of the restaurant and retail brands that rely on PAR. You will design secure CI/CD pipelines and cloud infrastructure, identify and remediate risk before it reaches production, and help raise the security and reliability bar across the engineering organization.

Requirements

• 6-12 years of experience across DevOps, platform engineering, security engineering, or a related field, including at least 3 years focused on DevSecOps or application/cloud security in production environments.
• Deep hands-on experience with CI/CD platforms such as GitHub Actions, GitLab CI, Jenkins, or Azure DevOps, including embedding security tooling into delivery pipelines.
• Strong cloud engineering experience with AWS and/or Azure, including IAM, networking, encryption, logging, and monitoring services.
• Production experience with Kubernetes and containers, including securing clusters and workloads at scale.
• Proficiency with infrastructure-as-code tools such as Terraform or CloudFormation and at least one scripting or programming language such as Python, Go, or Bash.
• Solid networking fundamentals, including TCP/IP, DNS, HTTP/HTTPS, TLS, routing, firewalls, security groups/NACLs, segmentation, and troubleshooting tools such as tcpdump, dig, and Wireshark.
• Hands-on cloud networking experience with VPC/VNet design, load balancing, ingress controllers, private connectivity, service mesh technologies, and zero-trust network patterns.
• Experience operating observability platforms such as Prometheus, Grafana, ELK/OpenSearch, or Datadog and using telemetry to improve reliability and security outcomes.
• Working knowledge of application security, including the OWASP Top 10, dependency and software supply-chain risk, secrets hygiene, and secure SDLC practices.
• Experience with security scanning and monitoring tools such as Snyk, Trivy, SonarQube, Wiz, Prisma Cloud, Falco, or equivalent platforms.
• Clear, pragmatic communication skills with the ability to explain risk and trade-offs to engineers and leaders and influence without direct authority.

Nice To Haves

• Security certifications such as CISSP, CKS, OSCP, AWS Certified Security - Specialty, Azure security certifications, or GIAC; networking certifications such as CCNA or AWS Certified Advanced Networking - Specialty.
• Experience with multi-region, highly available architectures, disaster recovery, and chaos engineering practices.
• Experience in payments, fintech, retail, or another PCI DSS-regulated environment.
• Exposure to zero-trust architectures, SIEM/SOAR platforms, or internal security platforms and paved-road tooling.
• Contributions to open-source security tooling or active participation in the security community.

Responsibilities

• Design, build, and operate secure CI/CD pipelines with integrated SAST, DAST, SCA, secrets scanning, and container image scanning, making the secure path the easy path for product teams.
• Harden and automate AWS and/or Azure infrastructure using infrastructure-as-code, with security policies enforced through OPA, Sentinel, or native policy engines.
• Own container and orchestration security across Docker and Kubernetes, including image provenance, runtime protection, network policies, and admission controls.
• Implement and tune cloud security posture management, vulnerability management, and threat detection capabilities, and partner with engineering teams to drive findings through remediation.
• Build and maintain secure secrets management, identity, workload identity, service mesh mTLS, and least-privilege access patterns.
• Lead threat modeling and secure design reviews for new services and architectures, partnering with product engineering early in the development lifecycle.
• Respond to security events and lead post-incident analysis, improving detection, alerting, and runbooks after each incident.
• Design and manage cloud networking, including VPC/VNet architecture, subnetting, routing, NAT, peering, transit gateways, private endpoints, and hybrid connectivity.
• Operate edge and traffic-layer security, including load balancers, API gateways, WAF, DDoS protection, CDN configuration, DNS management, and TLS certificate lifecycle/PKI automation.
• Implement GitOps-based delivery using Argo CD or Flux with Helm/Kustomize and progressive delivery patterns such as blue-green and canary releases with automated rollback.
• Build and operate observability capabilities across metrics, logging, tracing, and alerting, with defined SLOs and actionable, low-noise alerts.
• Manage artifact repositories and software supply-chain controls, including image registries, SBOM generation, artifact signing, and provenance using technologies such as Sigstore/Cosign and SLSA.
• Drive capacity planning, autoscaling, and cloud cost optimization across compute, storage, and network layers without compromising security.
• Champion compliance-relevant engineering controls, including PCI DSS and SOC 2, and automate evidence collection wherever possible.
• Mentor engineers on secure coding and operational security practices, acting as a force multiplier rather than a gatekeeper.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed