DevSecOps Engineer

Job Description
Responsibilities:
Define and deploy monitoring, metrics, and logging systems. Utilize monitoring tools to identify issues, resolve, and/or escalate to development.
Develop metrics to measure performance against initiatives and report on those to stakeholders.
Ensure we have a highly available and secure infrastructure with appropriate automation, monitoring, intrusion analysis, and incident response.
Propose changes to existing policies and procedures to ensure operational efficiency and regulatory compliance.
Stay informed and lead the evolution of our continuous delivery systems on Azure.
Collaborate with the product development team to ensure there is a convergence of business, technical and security requirements; liaise with management to align existing technical installed base and skills with future architectural requirements.
Develop and coordinate roadmaps across security, engineering, and IT functions to ensure all goals are in sync and cross-department dependencies are managed.
Represent Skan’s platform to clients and prospects.
Develop and maintain IT strategy, guidelines, policies, and execution.
Work with leadership across all teams to own and oversee compliance initiatives including SOC2, Health Insurance Portability, and Accountability Act (HIPAA), General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and associated federal and state privacy laws.
Implement, Own, monitor, and report on compliance with security policies (such as SOC2 and HIPPA), as well as the enforcement of policies.
Qualification:
5+ years of hands-on experience
Experience with provisioning and deploying SAAS-based applications in Azure
Passion for solving operational technical challenges with scalable automated solutions to technical challenges
Azure Certification in Security - Specialty
Deep knowledge of security/operations infrastructure including network infrastructure components (routers, firewalls), vulnerability management tools, IDS/IPS, SIEM, WAF, etc.
Deep understanding of CI and containerization
Commitment to improvement
Experience leading an operations organization of some form; SecOps, DevSecOPs, DevOps
Experience with security laws and frameworks such as SOC2, ISO 27001, HIPAA, HITRUST, FedRAMP, PCI-DSS, and others
Startup or fast-growing company experience is a plus