SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Certa is an AI-first third-party risk management platform used by Fortune 500 companies and fast-growing startups to onboard, assess, and monitor vendors, suppliers, and partners across risk, compliance, and ESG. The company has processed over 10 million entities for 100,000+ users across 120+ countries and is backed by Fin Capital, Vertex Ventures, and Point72 Ventures.
As Senior DevSecOps Engineer, you will be responsible for securing, automating, stabilizing, and scaling Certa's AWS production infrastructure. This is a hands-on, operationally critical role that bridges Engineering, Security, and Operations.
Key responsibilities include:
- Managing and securing AWS production workloads across EKS, ECS, EC2, and serverless environments, including core services like S3, IAM, CloudFront, API Gateway, VPC/networking, and WAF
- Owning incident response, root cause analysis, uptime, and SLA/performance targets
- Building and maintaining secure CI/CD pipelines (Jenkins, GitHub Actions, GitLab CI, CodePipeline) with embedded SAST/DAST/SCA, container, and IaC scanning
- Automating provisioning via Terraform/CloudFormation with policy-as-code guardrails
- Embedding Zero Trust, least-privilege IAM, secure key management, and defense-in-depth across AWS architecture
- Driving vulnerability management and compliance monitoring
- Standing up monitoring and alerting (CloudWatch, Prometheus, Grafana, ELK) for proactive anomaly detection
- Partnering with Development and QA to improve deployment velocity and mentor engineers on DevSecOps best practices
Required qualifications:
- 6–8 years in Cloud/DevOps/DevSecOps with strong hands-on AWS production experience
- Deep Kubernetes, Docker, and Infrastructure-as-Code expertise (Terraform/CloudFormation)
- Strong CI/CD tooling experience (Jenkins, GitHub Actions, GitLab CI, CodePipeline)
- Strong networking fundamentals (VPC design, routing, DNS, TLS, load balancing)
- Experience integrating security scanning and compliance controls
- Solid scripting skills (Bash, Python, Helm, Terraform, YAML/JSON)
- Strong troubleshooting and analytical skills
Certa is a remote-first company with office locations in London, San Francisco, and Jaipur. The company offers competitive compensation, 49 days paid time off, full benefits, retirement and wellness plans, professional development support, and annual company offsites.
