Senior DevSecOps

Vermont Information Processing • Colchester, VT

13h • $170,000 - $200,000 • Remote

About The Position

Vermont Information Processing (VIP) is hiring a Senior DevSecOps professional to own security across software development, release pipelines, and cloud operations. The role will make secure development the default for engineering teams by enforcing code-security checks, operationalizing a cloud security framework, strengthening identity and access controls, improving secrets and data protection, and building resilience through immutable backups. The program has executive sponsorship and a funded roadmap, and the role will work closely with a junior cloud security engineer on VIP’s India team.

Requirements

• At least 5 years of experience across DevOps/platform and security engineering.
• Hands-on ownership of CI/CD systems, such as Jenkins and Bitbucket or other Git-based pipelines, and AWS.
• Hands-on experience with SAST, DAST, and SCA tooling and introducing security gates that developers accept.
• Strong AWS security knowledge, including IAM, organizations/accounts, networking, KMS, and posture management tooling.
• Fluency in infrastructure as code and automation, including Terraform or CloudFormation and Python.
• Collaborative working style suited to distributed teams, with comfort mentoring and working across time zones.

Nice To Haves

• Azure exposure.
• Experience with Okta-AWS federation, Rubrik or equivalent backup platforms, and container security.
• AWS Security Specialty, CCSP, or GIAC cloud certification.

Responsibilities

• Make SAST and SCA scanning required, low-friction gates in CI/CD across development teams, and introduce automated DAST and secrets scanning.
• Roll out VIP’s 15-domain, cloud-agnostic security framework and CrowdStrike CSPM across AWS estates, including VIP-core, VIP India, and acquired units.
• Reduce cloud misconfigurations and integrate security guardrails into workflows.
• Centralize AWS access through Okta, eliminate local credentials, implement least-privilege roles, and define a resource-tagging standard for ownership and classification.
• Implement managed secrets with rotation to replace environment variables and ad-hoc storage, verify encryption at rest, and support data-leak-prevention expansion beyond email.
• Configure tamper-proof, immutable backup tiers on the Rubrik platform and help define recovery-time objectives with IT.
• Build paved-road patterns and developer guidance, mentor the India-based junior cloud security engineer, and extend the security framework to acquired units.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed