DevSecOps Engineer III

Job not on LinkedIn

🔥 5 minutes ago

☕ Washington – Remote

☕ Washington – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

⛑ DevOps & Site Reliability Engineer (SRE)

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

National Trust

WebsiteLinkedInAll Job Openings

10,000+ employees

🤲 Charity

🏨 Hospitality

🛒 Retail

Charity • Hospitality • Retail

National Trust is Europe’s largest conservation organisation and a registered charity that protects and opens historic houses, gardens, parks, countryside and cultural heritage across England, Wales and Northern Ireland. It operates a wide range of visitor services — including food & beverage, retail, holidays, visitor experience and educational programming — and runs estate management, conservation, fundraising, volunteer and apprenticeship programmes to care for places and engage millions of visitors each year.

📋 Description

• Lead the hardening and modernization of our GitHub ecosystem — consolidating organizations, implementing guardrails and RBAC best practices, and establishing policy-as-code governance at scale. • Assess and evolve the current CI/CD posture — modernizing pipelines, evaluating tooling, and driving toward fully automated secure delivery workflows. • Implement Secure Software Development Framework (SSDF) practices to embed “secure-by-design” principles throughout the SDLC — ensuring supply chain integrity from commit to production. • Act as an SRE for new application infrastructure — building out observability, proactive reliability patterns, performance scaling strategy, and operational readiness. • Design, manage, and automate cloud infrastructure (including container and container orchestration where applicable) through infrastructure-as-code — aligned to NIST CSF 2.0, least-privilege, and zero-trust security models. • Develop and integrate ITSM operational workflows — introducing automation and process maturity where needed to align engineering velocity with auditable controls and resilience. • Promote a culture of security across the organization. • Be able to wear many hats, performing critically required duties as necessary, especially as the team is being developed. • Occasional travel to other offices, customers, and vendor offices

🎯 Requirements

• 5–8+ years of experience in DevSecOps, SRE, or Cloud Security Engineering roles operating in production-critical environments • Deep hands-on expertise with leading cloud providers (IAM, networking, security services, automation, zero-trust / least privilege, cost awareness) • Practical experience operating and securing Kubernetes — including IaC-driven provisioning, policy enforcement, and observability • Strong command of SCM administration — including RBAC, repo automation, organization policy enforcement, and secure SDLC controls • Proficiency with Infrastructure as Code (Terraform, CDK, or equivalent) and configuration automation (e.g., Helm, ArgoCD, Crossplane, etc. a plus) • Familiarity with ITSM-aligned engineering operations — enabling traceability, incident management, and operational readiness at scale • Excellent communicator and proactive collaborator — able to influence cross-functional teams and advocate for secure-by-design principles.

🏖️ Benefits

• Medical, Dental, and Vision insurance • 401(k) • Disability insurance