Join Orion Innovation as a DevSecOps Engineer to integrate security into our CI/CD pipelines and cloud infrastructure, ensuring robust, compliant, and scalable deployments for global clients.

Orion Innovation is seeking a highly skilled DevSecOps Engineer to drive security best practices across our software delivery lifecycle. You will collaborate with development, operations, and security teams to design, implement, and maintain secure, automated pipelines and cloud environments. Your work will directly impact the security posture of scalable digital products delivered to Fortune 500 clients.

Key Responsibilities:

• Architect and maintain secure CI/CD pipelines integrating static/dynamic analysis, dependency scanning, and secret management.
• Implement security controls for containerized workloads (Docker/Kubernetes) and serverless architectures.
• Conduct threat modeling, risk assessments, and security reviews for new and existing systems.
• Automate compliance checks and generate audit-ready reports for SOC 2, ISO 27001, and client-specific standards.
• Respond to security incidents, perform root cause analysis, and implement preventive measures.
• Mentor team members on secure coding practices and DevSecOps tooling.

Why Join Us?

• Work on cutting-edge projects spanning AI, IoT, and fintech.
• Be part of a global team with a strong focus on innovation and continuous improvement.
• Enjoy full remote flexibility while contributing to enterprise-level security challenges.

• Experience: 5+ years in DevOps or DevSecOps roles, with strong knowledge of cloud platforms (AWS, Azure, GCP).
• Security Skills: Hands-on experience with security tools (SAST, DAST, IAST), vulnerability management, and compliance frameworks (SOC 2, ISO 27001, HIPAA).
• Automation: Proficiency in scripting (Python, Bash) and infrastructure-as-code (Terraform, Ansible, CloudFormation).
• CI/CD: Deep expertise in Jenkins, GitLab CI, or GitHub Actions with integrated security scanning.
• Containerization: Docker, Kubernetes, and container security best practices (e.g., image scanning, runtime protection).
• Monitoring: Experience with SIEM, log aggregation, and incident response (e.g., Splunk, ELK, Datadog).
• Certifications: CISSP, CEH, or AWS Security Specialty are a plus but not required.

• Remote-First Culture: Work from anywhere with a flexible schedule.
• Competitive Compensation: Monthly salary plus performance bonuses.
• Professional Growth: Access to training, certifications, and conference budgets.
• Health & Wellness: Comprehensive medical, dental, and vision insurance.
• Paid Time Off: Unlimited PTO policy and paid holidays.
• Tech Stipend: Monthly allowance for home office and connectivity.