Senior DevSecOps Engineer

Hyperproof•Bellevue, WA

36d•$164,000 - $200,000•Onsite

About The Position

Hyperproof is seeking a talented Senior DevSecOps Engineer to join their team and lead efforts in supporting a multi-region, FedRAMP-authorized infrastructure. The ideal candidate is a seasoned professional with a passion for ensuring the reliability, scalability, and security of cloud-based infrastructure, particularly within Azure. This role requires a deep understanding of DevOps methodologies, security practices, and federal compliance standards. The Senior DevSecOps Engineer will collaborate with cross-functional teams, drive innovation, and continuously improve processes, understanding that compliance and developer velocity can coexist. The position is based in Seattle and requires availability until 6 pm Pacific daily.

Requirements

U.S. citizenship, residing and working from within the United States.
BS in Computer Science, Engineering, or a related field (or equivalent experience).
5+ years of extensive experience in SRE, DevSecOps or Platform engineering roles, with a focus on managing Azure-based infrastructure.
Demonstrated knowledge and interest in applying AI technologies towards fully or partially automating compliance & security workflows.
Strong programming skills (Python, Bash, Go, or Node.js) and demonstrated ability to drive complex technical initiatives from architecture through production.
Expertise in modern platform technologies: Kubernetes security, infrastructure-as-code (Terraform/Terragrunt), GitOps (Helm/ArgoCD/Flux), Ansible, CI/CD security, observability systems, and secrets management.
Familiarity with compliance standards and regulations, particularly NIST 800-53 and FedRAMP.
Excellent communication and collaboration skills, with the ability to work effectively in a cross-functional team environment.
A positive attitude and a willingness to learn, adapt, collaborate, and grow in a dynamic environment.
Candidate must be local within the Seattle area; available to work until 6pm Pacific on a daily basis.

Nice To Haves

Experience contributing to FedRAMP authorization efforts (Moderate or High), including SSP documentation, control implementation, or 3PAO coordination.
Experience with Azure networking, and security boundaries.
Experience with compliance automation, supply chain security (SBOM, image signing), or secrets management at scale.
Professional certifications: CISSP, Azure Security Specialty, CKS, or equivalent.
Familiarity with CMMC, OSCAL, or compliance-as-code practices.
Experience with vulnerability scanning and remediation tooling (e.g., Trivy, Snyk, Qualys, or Defender for Cloud).
Advanced degree in Computer Science or related field, or equivalent experience architecting secure, compliant platforms at scale.

Responsibilities

Develop and execute DevOps strategy tailored to all Hyperproof regions, including FedRAMP-authorized environments.
Own and evolve the Terraform/Terragrunt IaC pipeline for multi-subscription promotion, including continuous monitoring.
Architect secure, scalable platform infrastructure including GitHub Actions, GitLab, and ADO CI/CD pipelines with security gates, Kubernetes environments, observability systems, and compliance automation.
Support FedRAMP authorization activities: contribute to SSP documentation, NIST 800-53 control implementations, 3PAO coordination, and readiness assessments while establishing repeatable processes.
Lead the design and security implementation of the Seattle-based on-premise build/test platform, ensuring parity with Azure Kubernetes Service (AKS) patterns and meeting SOC 2 compliance standards.
Establish security and compliance architecture patterns across encryption, network segmentation, secrets management, supply chain security, and incident response.
Drive technical decisions and technology selection for cloud platforms, compliance tooling, and security controls.
Mentor and raise the technical bar across engineering teams through architecture reviews, design discussions, and establishing FedRAMP best practices.
Partner with security, product, and business leadership to translate federal customer requirements into technical architecture and deliver measurable improvements in security posture and operational efficiency.
Monitor, triage, and remediate CVEs and security vulnerabilities across infrastructure, container images, and dependencies, maintaining compliance with FedRAMP continuous monitoring requirements.

Benefits

Annual compensation reviews + equity
Unlimited PTO: strongly encouraged to unplug and recharge
Health: coverage for medical, dental, and vision - employee and dependents
401K, which vests immediately, complete with a 4% company match
12 weeks of Parental leave and 1 year free diapers and wipes with Honest
$500 home office stipend - at the time of hire. Any additional home office needs are requested as needed.
$100 quarterly paid wellness stipend
Pet insurance discount
Slack channel notifications turn off after 5 pm based on your time zone
Two Hypercharge weeks of rest where we close company-wide (July & Dec)