AWS Security Engineer

Description

Job Summary: We are seeking a Senior DevOps Engineer to design, build, and maintain cloud-native infrastructure, leading automation, reliability, and security across the software delivery lifecycle. Key Highlights: 1. Foundational role with full ownership and direct impact on engineering. 2. Collaborative, engineering-oriented culture. 3. Budget allocated for certifications and conferences. **ABOUT US** At VCM, we are a Professional Services Outsourcing firm serving companies across all U.S. states and Canada. We recruit talent, train and upskill professionals in the industry, advise our clients on our best practices, and hire and manage tropicalized personnel. We are looking for a **Senior DevOps** Engineer to join our team. ━━━━━━━━━━━━━━━━━━━━━━━━ **ABOUT THE ROLE** ━━━━━━━━━━━━━━━━━━━━━━━━ In this role, you will be responsible for designing, building, and maintaining the infrastructure, CI/CD pipelines, and security posture that power our cloud-native products — including our iOS mobile platform and its backend services. You will serve as the bridge between development and operations, championing automation, reliability, and security as standards across the entire software delivery lifecycle. ━━━━━━━━━━━━━━━━━━━━━━━━ **RESPONSIBILITIES** ━━━━━━━━━━━━━━━━━━━━━━━━ \- Design, implement, and maintain CI/CD pipelines (GitHub Actions, Fastlane) for iOS mobile and backend services \- Manage cloud infrastructure on AWS, GCP, and/or Azure using Infrastructure-as-Code (Terraform, Pulumi) \- Integrate security controls across the SDLC: SAST, DAST, SCA, secrets management, and container security \- Implement and manage container orchestration (Kubernetes / EKS / GKE) and containerization (Docker) \- Build and maintain observability stacks (Prometheus, Grafana, Datadog) to ensure SLA/SLO compliance \- Conduct threat modeling, vulnerability assessments, and coordinate penetration testing \- Manage secrets, certificates, and IAM (HashiCorp Vault, AWS Secrets Manager or equivalent) \- Lead incident response processes: on-call rotations, postmortems, and runbook documentation \- Mentor mid-level engineers on DevOps and security best practices \- Automate repetitive operational tasks to reduce toil and increase team velocity ━━━━━━━━━━━━━━━━━━━━━━━━ **REQUIREMENTS** ━━━━━━━━━━━━━━━━━━━━━━━━ \- 4+ years of experience in DevOps, SRE, or Cloud Infrastructure roles \- Proven track record of designing and maintaining production CI/CD pipelines \- Experience implementing DevSecOps practices (SAST, DAST, SCA, secrets management) \- Deep expertise in at least one cloud provider: AWS, GCP, or Azure \- Production experience with Kubernetes (EKS, GKE, or AKS) \- Proficiency in at least one scripting language: Python, Bash, or Go \- Experience leading incident response and authoring postmortems \- Familiarity with regulatory compliance frameworks (SOC 2, ISO 27001, PCI-DSS or equivalent) \- Bachelor’s degree in Computer Science, Systems Engineering, Cybersecurity, or related field \- Intermediate/advanced written and spoken English Desirable: \- Experience with iOS/Android mobile pipelines (Fastlane, Xcode, TestFlight) \- Experience with service mesh (Istio, Linkerd) \- Infrastructure for AI/ML or GPU workloads \- Contributions to open-source DevOps or security projects ━━━━━━━━━━━━━━━━━━━━━━━━ **TECHNOLOGIES** ━━━━━━━━━━━━━━━━━━━━━━━━ Terraform · Kubernetes · GitHub Actions · AWS / GCP / Azure · HashiCorp Vault · Docker · Snyk · Trivy · Prometheus · Grafana · Fastlane · ArgoCD · Helm · Datadog · PagerDuty ━━━━━━━━━━━━━━━━━━━━━━━━ **WHAT WE OFFER** ━━━━━━━━━━━━━━━━━━━━━━━━ \- Hybrid work model: remote on Mondays and Fridays; on-site in Lima from Tuesdays to Thursdays \- Foundational role with full ownership and direct impact on the engineering organization \- Collaborative, engineering-oriented culture with a strong ownership mindset \- Budget allocated for certifications and conferences \- Competitive compensation package (to be determined based on experience) Valued certifications: AWS Solutions Architect / DevOps Engineer · CKA or CKS · HashiCorp Terraform Associate · CISSP · CEH · OSCP Apply here: https://vcmpremier.buk.pe/s/o64cxLwSczF1ZnoG Application questions: * Do you have intermediate/advanced English proficiency? * Are you available to work on-site in Santiago de Surco? (Reference: El Trigal Shopping Center) * What are your salary expectations? Work location: On-site employment