Senior DevOps Engineer

Tunnl

1d • Hybrid

About The Position

Tunnl is seeking a highly skilled, security-minded Senior DevOps Engineer to help design, build, and secure our cloud infrastructure and software delivery pipelines. You will partner closely with software engineering, data science / machine learning, data engineering, cyber/security, and platform teams to create a secure, scalable, resilient foundation for solutions that support some of society’s biggest challenges.
This role blends deep DevOps engineering capability with security-first thinking. You will embed security controls into CI/CD, automate compliance guardrails, and raise the bar for infrastructure reliability and cloud security practices across AWS (with awareness of CLOUD best practices). You will help ensure that security, governance, and operational excellence are built into how Tunnl ships software, not bolted on afterward.
If you thrive at the intersection of cloud engineering, automation, and applied security, this role will be a strong fit.

Requirements

• 5+ years of experience in Cloud Engineering, DevOps, SRE, Platform Engineering, or DevSecOps, with strong focus on security and automation.
• Demonstrated senior-level ownership of cloud infrastructure and CI/CD systems supporting production workloads.
• Deep knowledge of AWS core infrastructure and security services (e.g., IAM, VPC, EC2, RDS, DynamoDB, Lambda, SQS/SNS, ECS/ECR, CloudTrail, Config, Security Hub, Inspector).
• Strong knowledge of IAM design, network security controls, encryption systems (KMS, key rotation), secrets management, and secure service-to-service access patterns.
• Experience implementing vulnerability scanning and compliance controls using tools such as Ethyca, Security Hub, Inspector, Aqua, Prisma, or similar.
• Familiarity with container security, dependency security, and software supply chain security best practices.
• Strong proficiency with Infrastructure-as-Code tooling such as Terraform (preferred), CloudFormation, CDK, or Ansible.
• Proven ability to standardize environments and reduce human risk through automation.
• Experience with SIEM/log aggregation and incident workflows, including Splunk or comparable systems.
• Comfort supporting operational readiness through logs, traces, metrics, and post-incident analysis.
• Strong scripting/programming ability (Python preferred) for automation, tooling, and integrations.
• Experience with CI/CD tools (GitHub Actions, Jenkins, CodePipeline, or similar).
• Familiarity with observability tooling (Prometheus, Grafana, ELK/EFK, or equivalents).
• Strong Linux/Unix command-line skills and solid networking fundamentals (TCP/IP, DNS, VPNs, firewalls, load balancing).

Nice To Haves

• AWS certifications: Solutions Architect, Security Specialty, or DevOps Engineer – Professional.
• Experience implementing Zero Trust principles and modern identity-driven security patterns.
• Hands-on experience with cloud-native security architecture for microservices and serverless environments.
• Background in security operations, incident response, and security program execution in regulated environments.

Responsibilities

• Establish and enforce cloud security standards across AWS, including IAM, network segmentation, encryption, secrets management, and secure workload patterns.
• Implement continuous security posture monitoring aligned to the AWS Well-Architected Framework and security best practices (e.g., CIS benchmarks, NIST guidance, ISO principles).
• Design automated guardrails for vulnerability management, patching, configuration drift detection, key rotation, and secrets lifecycle management.
• Improve detection and response readiness through centralized logging, alerting, and security event workflows.
• Own the technical engagement with security and data privacy auditors, serving as Tunnl’s primary point of contact for infrastructure, cloud security, and DevSecOps controls.
• Architect and maintain CI/CD pipelines with built-in security scanning and enforcement (SAST/DAST, dependency scanning, IaC scanning, artifact signing, policy-as-code).
• Implement repeatable, secure infrastructure deployment using Infrastructure-as-Code (Terraform and/or equivalent tooling).
• Build and maintain containerized and cloud-native deployment environments (Docker, Kubernetes and/or ECS/Fargate) with hardened images, runtime controls, and supply chain protections.
• Improve developer experience by making secure workflows easy, fast, and consistent across engineering teams.
• Help define and implement standards for availability, backup/restore, disaster recovery, and operational maturity.
• Partner with engineering leadership to evolve incident response practices including on-call readiness, runbooks, and post-incident learning loops.
• Proactively identify reliability/security risks, prioritize remediation, and drive cross-team follow-through.
• Partner across software, data, and cyber teams to ensure security requirements are integrated into system design and delivery.
• Serve as a trusted advisor to engineering leadership on cloud security strategy, risk tradeoffs, and platform evolution.
• Coach engineers on DevOps patterns, secure-by-default architecture, and operational excellence.
• Communicate clearly with both technical and non-technical stakeholders to build trust and adoption of platform/security initiatives.
• Contribute to Tunnl’s mission and culture through principled execution, respectful collaboration, and high ownership.

Benefits

• Comprehensive benefits with excellent medical, vision, and dental coverage.
• Health Savings Account (HSA) and Flexible Spending Account (FSA) options.
• Employer-paid life insurance & short-term & long-term disability, with other voluntary additional coverage available (accident, critical illness, hospital indemnity).
• Flexible paid vacation plus 80 hours of paid sick leave.
• 10 paid company holidays per year.
• 401(k) plan with 100% match up to 3%, plus 50% match up to 5% (subject to IRS limits).
• Cell phone reimbursement stipend.
• Monthly parking or commuter stipend for VA-based employees.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed