Senior DevOps Engineer, Security & Compliance

🕒 4 days ago

🗽 New York – Remote

🗽 New York – Remote

⏰ Full Time

🟠 Senior

⛑ DevOps & Site Reliability Engineer (SRE)

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Zafran Security

WebsiteLinkedInAll Job Openings

51 - 200 employees

🔐 Security

Security

Zafran Security is a company focused on security. The only information provided is website stylesheet/CSS content and no explicit product, service, or sector details. Based on the company name, it likely operates in the security space (e. g. , physical security, cybersecurity, or security consulting), but the specific focus cannot be determined from the available data. Because the evidence is limited, this description remains conservative and recommends clarifying materials (website copy, product pages, or company overview) to refine categorization.

📋 Description

• Lead the technical work to achieve and maintain compliance certifications (SOC 2, ISO 27001, and the upcoming FedRAMP process) • Design and implement security controls across AWS infrastructure, CI/CD pipelines, Kubernetes, and application deployments • Build the automation, logging, and evidence collection required for continuous compliance • Implement and maintain secrets management, IAM hardening, network segmentation, and encryption standards • Develop infrastructure solutions for customers in highly regulated industries, including isolated or dedicated environments • Collaborate with security, legal, and engineering on threat modeling, vulnerability management, and incident response • Stay ahead of FedRAMP, FISMA, and related federal requirements and translate them into concrete engineering work

🎯 Requirements

• Must be located in the US, with a strong preference for the New York area; US remote considered • U.S. citizenship or lawful permanent resident status (Green Card) required due to FedRAMP-related eligibility requirements and access to a U.S.-only environment. • 5+ years of DevOps / platform engineering experience with a strong security focus • Direct experience implementing controls for SOC 2, ISO 27001, HIPAA, PCI, or FedRAMP • Deep AWS security knowledge: IAM, KMS, GuardDuty, Security Hub, VPC design, Config • Strong Kubernetes security experience: network policies, admission control, runtime security • Infrastructure as Code with Terraform, with a focus on policy-as-code • CI/CD security: SAST, DAST, SCA, image scanning, supply chain hardening • Solid scripting in Python or Bash

🏖️ Benefits

• flexible PTO • health insurance plans (medical, dental, vision) • monthly stipend for phone and internet • 401k • flexible spending account • home office stipend