DevSecOps Engineer

Tradeify

. Design, build, and maintain CI/CD pipelines using GitHub Actions and OIDC across services and repositories .

Posted 9/15/2026full-timeRemote • United StatesMid-LevelSenior💰 $120,000 - $160,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing AWS cloud infrastructure and CI/CD pipelines, with a strong focus on security operations and incident response. Proficient in containerization, infrastructure-as-code, and compliance within a fintech environment.

Highest-signal resume keywords

AWS Cloud Infrastructure ManagementCI/CD Pipeline Design with GitHub ActionsDocker Containerization and HardeningVulnerability Management and RemediationIncident Response Leadership

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

AWSDockerCI/CDPostgreSQLRedisLinux Systems AdministrationShell ScriptingVulnerability ScanningInfrastructure-as-CodeNetwork Security Fundamentals

Soft Skills

Strong Written CommunicationAbility to Work Independently

Tools & Technologies

GitHub ActionsCaddyTerraformPulumiCloudFormationSIEM ToolingSOC Workflows

Industry Keywords

FintechComplianceSOC 2PCI DSSRegulated Industry

Tech Stack

Tools & technologies

AWSCloudDockerEC2FirewallsJavaScriptLinuxNext.jsNGINXPostgresPythonReactRedisShell ScriptingTerraformTypeScript

About the role

Key responsibilities & impact

Design, build, and maintain CI/CD pipelines using GitHub Actions and OIDC across services and repositories
Manage and scale AWS cloud infrastructure, including EC2, S3, SES, ECR, Parameter Store, and IAM
Own containerized deployments with Docker and Docker Compose, including reverse proxy and TLS termination with Caddy
Build and maintain infrastructure-as-code for repeatable, auditable environment provisioning
Improve observability through logging, metrics, tracing, and alerting for production systems
Support PostgreSQL and Redis operations, including backups, failover, and performance tuning
Own vulnerability management, including scanning, triage, patching cadence, and remediation tracking
Design and enforce access control, secrets management, and least-privilege practices across cloud and CI/CD systems
Build and monitor security detection and alerting, including intrusion detection, anomaly detection, and log-based threat monitoring
Lead incident response, develop runbooks, coordinate responses to security events, and drive postmortems
Support compliance and audit readiness for a financial services/fintech environment
Perform security reviews of new infrastructure, integrations, and deployment changes before release
Champion secure-by-default practices, including dependency hygiene, secrets scanning, and hardened base images
Partner with engineering to reduce deployment friction and improve release reliability
Report to the Head of Engineering / CTO

Requirements

What you’ll need

Experience owning both infrastructure/DevOps and security operations responsibilities, or a strong track record in one with real depth in the other
Production experience with AWS, including EC2, S3, IAM, ECR, and Parameter Store or equivalent secrets management
Strong Docker/containerization experience, including writing and hardening Dockerfiles and Compose configurations
CI/CD pipeline design and maintenance using GitHub Actions or equivalent, including OIDC-based cloud authentication
Experience with vulnerability scanning, patch management, and remediation workflows
Solid understanding of network and application security fundamentals, including TLS, firewalls, IAM, and least privilege
Production experience with PostgreSQL and Redis, including backups, monitoring, and scaling
Linux systems administration and shell scripting for automation
Incident response experience, including leading through an active issue
Ability to work independently in a startup environment with high ownership and minimal hand-holding
Strong written communication for documenting runbooks, postmortems, and security findings
Must be U.S.-based
Ability to work flexible hours to support collaboration across time zones, including the U.S.
Nice to have: fintech, trading, or regulated-industry experience
Nice to have: familiarity with Next.js/React, Python/FastAPI, TypeScript, BullMQ, and Redis
Nice to have: SIEM tooling, SOC workflows, or managed detection and response platforms
Nice to have: SOC 2, PCI DSS, or similar compliance frameworks
Nice to have: Terraform, Pulumi, CloudFormation, or similar infrastructure-as-code tooling
Nice to have: Caddy, nginx, Traefik, or similar reverse proxies and TLS automation
Nice to have: Claude Code or similar AI-assisted development workflow familiarity

Benefits

Comp & perks

Performance bonuses
Comprehensive benefits
Competitive base salary
High ownership from day one
Direct influence on architecture and tooling decisions
High-performance culture that rewards ownership, curiosity, and results
Professional-grade futures trading firm at a pivotal stage of growth
Small team structure
Global trader community and fast-moving trading platform