Senior DevSecOps Engineer - Velocity Platform

Nelnet•Lincoln, NE

3d•$120,000 - $158,000•Hybrid

About The Position

We are looking for a Senior DevSecOps Engineer to own the infrastructure, deployment automation, and security posture of Velocity, Nelnet's cloud-native loan servicing platform and the company's first major enterprise system to run entirely in AWS. Velocity is a fully serverless platform. Roughly 50 to 60 Node.js/TypeScript microservices run on AWS Lambda behind API Gateway, an event-driven backbone is built on SNS/SQS with namespace-based filtering, data lives in Aurora PostgreSQL with read-replica clusters, and infrastructure is provisioned through CloudFormation. We deliver through GitHub and GitHub Actions across four environments (Dev, QA, Train, Production), and we monitor through CloudWatch and Datadog. We believe the full lifecycle of a cloud system, including provisioning, deployment, maintenance, and retirement, belongs in code. We believe security controls belong in the pipeline, not in a checklist at the end of it. And because Velocity operates in the financial services sector, we are held to defined vulnerability remediation commitments by our clients and to a growing set of audit and compliance obligations, including SOC 2. This is a senior, high-autonomy role. You will be handed problems, not specifications. Much of what needs to be built here has never been built here before, and there is no one to hand you a finished requirements document. You will be expected to define the problem, propose the approach, socialize it with architecture and delivery teams, and then go build it. You will also be one of the most senior technical voices on the team, setting standards other engineers follow and raising the technical ceiling of everyone around you.

Requirements

1-3+ years of experience with AWS DevOps, cloud architecture, networking, deployment processes, and infrastructure as code tools
Experience solving complex problems, creating algorithms, and working through challenging requirements
Experience creating software in an agile, iterative environment
Experience with source control (Git, branching, merging, etc.)
Ability to obtain a security clearance
Knowledge in the area of Federal Government NIST compliance preferred

Nice To Haves

select specialization in just a few will also be considered with great interest.

Responsibilities

Monitor and support all installed systems and infrastructure.
Evaluate system performance, identify potential bottlenecks, develop solutions, and implement change via the change management process
Design, implement and monitor enterprise-grade secure fault-tolerant infrastructure
Define and evolve Build & Release best practice by working within teams and educating the other stakeholder teams. These best practices should support traceability & auditability of change.
Ensure continuous availability of various DevOps tools supporting SCM & Release Management including Source Control, Continuous Integration, & Change Management.
Work with cross-functional teams in design, development and implementation of enterprise scalable features related to enabling higher developer productivity, environment monitoring and self-healing, and facilitate autonomous delivery teams.
Build infrastructure automation tools and frameworks
Integrate newly developed and existing applications into cloud environments
Automate deployment pipelines in a scalable, secure and reliable manner
Leverage application monitoring tools to troubleshoot and diagnose environment issues
Have a culture of automation where any repetitive work is automated
Work closely with Cloud Infrastructure and Security teams to ensure organizational best practices, policies, and procedures are followed
Automation of security controls