DevSecOps Engineer – AWS, Terraform, Security Compliance

Job not on LinkedIn

🔥 0 minutes ago

🇨🇦 Canada – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

☁️ Cloud Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Zazz

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2009

💼 Consulting

📣 Marketing

🔌 API

Consulting • Marketing • API

Zazz is an American mobile app development company that specializes in architecting and maintaining digital solutions for a diverse range of clients, including VC-backed startups, government agencies, and Fortune 500 companies. With a team of over 275 engineers and designers, Zazz offers end-to-end services from product strategy to mobile app development and blockchain solutions. The company prides itself on leveraging the latest technologies and methodologies to deliver high-quality products and innovative solutions that help businesses grow and adapt in a digital-first world.

📋 Description

• Manage and support AWS infrastructure and environments • Work extensively with Terraform/IaC for infrastructure provisioning, migrations, and deployments • Manage AWS access, permissions, security groups, and infrastructure controls • Support production deployments and infrastructure changes while maintaining segregation of duties • Troubleshoot infrastructure issues and provide production support for live applications • Support client onboarding, including environment configuration and secure data movement into AWS • Maintain AWS infrastructure, asset, security, and access documentation • Monitor production and security environments and respond to issues or security concerns • Collaborate with development and engineering teams while separating development and production access • Manage access for new hires, terminated employees, and existing users • Conduct periodic access reviews and maintain least-privilege access • Support endpoint/laptop security management through Scalefusion • Monitor and maintain security posture using tools such as SecurityScorecard • Support SOC 2 compliance activities, annual audits, evidence collection, and auditor requests • Review and recommend updates to IT security, access control, disaster recovery, and change control policies • Review and update security awareness training materials and conduct annual training • Conduct vulnerability testing approximately twice per year using AppCheck and support remediation • Participate in and own assigned components of Disaster Recovery tests • Verify DR documentation is accurate, complete, and current • Conduct security awareness and policy training for new hires • Support secure onboarding, access provisioning, and employee offboarding • Understand, document, and maintain the AWS SageMaker environment • Own assigned SageMaker infrastructure and operational activities

🎯 Requirements

• Strong hands-on experience with AWS infrastructure and cloud environments • Strong experience with Terraform and Infrastructure as Code • Experience managing AWS IAM, permissions, security groups, and access controls • Experience supporting production environments and live applications • Strong understanding of DevSecOps principles and practices • Experience with cloud security and infrastructure security • Experience with monitoring, troubleshooting, and incident response • Experience with infrastructure migrations and deployments • Experience with access management and user lifecycle management • Experience working with security/compliance controls in a production environment • Familiarity with SOC 2 requirements and audit evidence processes • Experience with Disaster Recovery testing and documentation • Experience with vulnerability assessment/testing tools • Experience working within environments serving financial institutions, banks, or other security-sensitive clients is highly desirable • Experience supporting SOC 2 Type II environments • Experience supporting financial services, banking, fintech, or other regulated environments • AWS certifications such as AWS Solutions Architect or AWS Security Specialty, or equivalent experience • Terraform certification or strong demonstrable Terraform experience • Experience managing ML/cloud environments, particularly SageMaker • Experience with security and compliance tools such as AppCheck, SecurityScorecard, and Scalefusion • Previous experience working in a part-time DevSecOps or managed-services capacity • Ability to work independently with limited day-to-day supervision • Strong attention to security, documentation, and compliance requirements • Clear communication with technical and non-technical stakeholders

🏖️ Benefits

• Part-time workload averaging up to approximately 20 hours per week • Additional support opportunities during SOC 2 audit preparation, evidence collection, DR testing, and other compliance periods