Senior DevSecOps Engineer

Certa is the AI-first third-party operating system. Enterprises, from the Fortune 500 to fast-growing startups, use our no-code platform to onboard, assess, and monitor their vendors, suppliers, and partners across risk, compliance, and ESG. We have processed over 10 million entities for 100,000+ users across 120+ countries, and are backed by Fin Capital, Vertex Ventures, and Point72 Ventures.We are hiring a Senior DevSecOps Engineer to strengthen Certa’s AWS production infrastructure and embed security-first engineering practices across our product ecosystem.This role is hands-on and operationally critical, responsible for securing, automating, stabilizing, and scaling AWS workloads across EKS, ECS, EC2, and server-less environments.The position bridges Engineering, Security, and Operations to ensure high availability, compliance, resilience, and secure CI/CD deployments.What You Will DoAWS infrastructure & operations: Manage, secure, and scale AWS production workloads (EKS, ECS, EC2, Lambda) and core services (S3, IAM, CloudFront, API Gateway, VPC/networking, WAF), owning incident response, RCA, uptime, and SLA/performance.CI/CD & automation: Build and maintain secure CI/CD pipelines (Jenkins, GitHub Actions, GitLab CI, CodePipeline) with embedded SAST/DAST/SCA, container, and IaC scanning, and automate provisioning via Terraform/CloudFormation with policy-as-code guardrails.Security engineering: Embed Zero Trust, least-privilege IAM, secure key management, and defense-in-depth across the AWS architecture, and drive vulnerability management and compliance monitoring.Observability & reliability: Stand up monitoring and alerting (CloudWatch, Prometheus, Grafana, ELK) for proactive anomaly detection and debugging across infrastructure, networking, and application layers.Cross-functional enablement: Partner with Development and QA to improve deployment velocity, document architecture standards and runbooks, and mentor engineers on DevSecOps best practices.What You Will NeedExperience: 6–8 years in Cloud / DevOps / DevSecOps, with strong hands-on AWS production experience (EKS, ECS, EC2, S3, CloudFront, API Gateway, IAM, WAF, VPC).Infrastructure & CI/CD: Deep Kubernetes, Docker, and Infrastructure-as-Code (Terraform / CloudFormation) expertise, plus CI/CD tooling (Jenkins, GitHub Actions, GitLab CI, CodePipeline).Networking & security: Strong networking fundamentals (VPC design, routing, DNS, TLS, load balancing) and experience integrating security scanning and compliance controls.Scripting & problem-solving: Solid scripting (Bash, Python, Helm, Terraform, YAML/JSON) plus strong troubleshooting and analytical skills.Compensation And BenefitsCompensation: Top of market salaryTime off: 49 days paid time offBenefits: PTO, full benefits, retirement and wellness plans.Growth: Professional development support, remote workspace setup bonus.Team building: Annual company offsites in exciting locations around the worldLocationCerta is a remote-first company and we hire globally. We believe strongly in each team member working from the location that they choose. Should Certers wish to meet and work in person they have 3 lively office locations they can travel to:LondonSan FranciscoJaipurThe perfect place for Certers to collaborate, co-work and have face to face meetings.Why CertaCategory leadership. Certa was named a Leader in the inaugural 2026 Gartner Magic Quadrant for Third-Party Risk Management Tools - recognition that we're defining the category, not following it.Industry recognition. We've been honored across the analyst and awards landscape, including Top Tech and Customer Value distinctions in The Hackett Group's 2026 Risk Management SolutionMap, the ProcureTech100 (Advanced AI and Risk Management categories), and Best Overall eProcurement Software in the FinTech Breakthrough Awards.A top place to work. Certa was named one of Forbes' Best Startup Employers in the US. We're a fast-growing company where you'll wear many hats, ship quickly, and shape decisions that matter.Real scale with strong backing. We've processed over 10 million entities for 100,000+ users across 120+ countries. We're well-funded by leading investors including Fin Capital, Vertex Ventures, and Point72 Ventures, on the back of an oversubscribed Series B, headed towards Series C.We're excited to meet you!