The Planet Group

Compensation

Full Description

Location: This is a primarily remote position with quarterly team gatherings. Candidates must be willing to travel for at least one onsite interview. Employment Type: Contract-to-Hire (6 months with opportunity for permanent conversion) Compensation: • Competitive hourly compensation during the contract period • Upon conversion: $130,000–$180,000 • Eligible for annual bonus and equity Work Authorization: Candidates must be authorized to work in the United States without current or future visa sponsorship. About the Role We are seeking a Senior DevSecOps Engineer to serve as a technical leader at the intersection of software development, security, and cloud infrastructure. This role focuses on building and securing cloud platforms that support the transmission, processing, and storage of data from connected IoT devices. The ideal candidate is passionate about implementing secure-by-design cloud architectures and fostering a "Shift Left" security culture by embedding security, compliance, and automation throughout the software development lifecycle. You will work closely with engineering, DevOps, and infrastructure teams to ensure cloud environments remain secure, scalable, and compliant while enabling rapid software delivery. Key Responsibilities Cloud Security Architecture • Design and implement secure cloud infrastructure for IoT data transmission, processing, and storage. • Develop secure authentication, encryption, and identity management solutions that protect data confidentiality, integrity, and availability. • Create and maintain Infrastructure as Code (IaC) modules that incorporate security best practices and regulatory requirements. Secure Cloud Communications & Data Protection • Ensure secure, encrypted communication between IoT devices and cloud services. • Implement network security controls to protect against threats such as unauthorized access, distributed denial-of-service (DDoS) attacks, and man-in-the-middle attacks. • Develop and maintain security controls for protecting data both in transit and at rest. Cloud Integration & Access Management • Secure the integration of cloud services supporting data ingestion, storage, and processing. • Implement and maintain identity and access management controls to ensure only authorized users and systems have access. • Manage secure APIs and authentication mechanisms between cloud platforms and enterprise applications. Security Compliance & Governance • Ensure cloud infrastructure aligns with industry security standards, including ISO 27001. • Conduct security assessments, compliance audits, and vulnerability reviews. • Maintain documentation supporting compliance and security governance initiatives. Threat Modeling & Vulnerability Management • Perform threat modeling and risk assessments across cloud environments. • Implement monitoring, alerting, and detection capabilities to identify and respond to security events. • Drive vulnerability remediation efforts and continuously improve the organization's security posture. Cross-Functional Leadership • Partner with Cloud Engineering, DevOps, Infrastructure, and Security teams to embed security throughout the development lifecycle. • Mentor engineering teams on secure cloud architecture and DevSecOps best practices. • Promote security awareness through training and technical leadership. Qualifications Required • 5+ years of experience securing cloud infrastructure in enterprise environments. • Strong knowledge of cloud security principles, identity and access management, encryption, TLS, and secure communication protocols. • Hands-on experience securing public cloud platforms such as AWS, Azure, or Google Cloud Platform (GCP). • Experience with Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), container security, and vulnerability management. • Experience implementing Infrastructure as Code, preferably using Terraform. • Working knowledge of ISO 27001 or comparable cloud security frameworks. • Excellent communication skills with the ability to collaborate across engineering and security teams. Preferred • Professional security certifications such as CISSP, CCSP, GCSA, or cloud security certifications from AWS, Microsoft Azure, or Google Cloud. • Experience supporting industrial, manufacturing, or IoT cloud environments. • Strong understanding of DevSecOps automation and CI/CD security practices. Why Join? This is an opportunity to help shape the security architecture for a rapidly growing cloud platform supporting next-generation industrial and IoT solutions. You'll play a key role in building secure, scalable cloud infrastructure while influencing engineering practices across the organization.