Senior DevSecOps Engineer

Job description

About PactFi Private asset markets (PE, Private Credit, VC, Real Estate) have 10x to 9.8T in AUM over the past decade and are projected to grow to $17T in the next five years. However, digital infrastructure has not kept pace, with most of the market operating predominantly in error-prone, internal-only software solutions. PactFi provides secure, end-to-end, operational infrastructure for managing complex private credit transactions. Our web-based application brings together all parties involved in such a transaction to more efficiently allocate capital, complete KYC, share documents, manage funds flow, and more. The platform is secured to a bank-grade standard, and we have received our SOC 2 Type 2 attestation. PactFi was developed in close partnership with two of the industry's largest players, both of whom represent the top 3 players in the private credit space by both size (AUM) and deal activity. Overview We're looking for a Senior DevSecOps Engineer to work closely with our Lead DevSecOps Engineer to improve the security, reliability, infrastructure, deployment, and operational maturity of our platform. This is a hands-on individual contributor role for someone who enjoys building, automating, securing, and improving production systems — not managing a team. You'll strengthen our CI/CD workflows, AWS infrastructure, observability, SOC 2 readiness, business continuity, disaster recovery, and 24/7 on-call operations. The ideal candidate is experienced, practical, and collaborative — comfortable owning technical workstreams and helping engineering teams ship safely and efficiently. What You'll Do Infrastructure & Cloud Engineering - Design, build, and improve secure, scalable AWS infrastructure using infrastructure-as-code (Terraform, Pulumi-Python). - Improve cloud networking, IAM, secrets management, environment isolation, and secure configuration. - Standardize provisioning, access control, auditability, and change management. - Troubleshoot infrastructure issues and drive long-term fixes that reduce operational toil. CI/CD & Developer Experience - Build, maintain, and improve secure CI/CD pipelines for application, infrastructure, and platform deployments. - Support container-based build and deployment workflows, including rolling updates and rollback strategies. - Support Environment as a Service for the engineering and QA teams - Reduce deployment friction while maintaining strong security and compliance controls. Security, Compliance & SOC 2 Type 2 - Embed security controls into infrastructure, CI/CD pipelines, and cloud operations. - Support SOC 2 Type 2 readiness through control implementation, evidence collection, access reviews, and audit support. - Manage secrets, IAM, least-privilege access, and vulnerability management across containers, dependencies, and cloud services. - Ensure sensitive data is protected across logs, pipelines, monitoring systems, backups, and AI-assisted workflows. - Contribute to secure usage patterns for AI/ML tools and services, including data handling, vendor risk, access controls, and model boundary considerations. Observability, Reliability & On-Call - Build and improve observability across logs, metrics, dashboards, and alerts; maintain centralized logging pipelines. - Define and maintain SLOs, SLIs, alerting standards, and escalation paths. - Participate in a 24/7 production on-call rotation; support incident response, root-cause analysis, and postmortems. - Create and maintain runbooks, playbooks, and operational documentation. Business Continuity & Disaster Recovery - Design, document, and improve BC/DR plans; support RTO/RPO planning for critical systems. - Implement and test backup, restore, replication, failover, and recovery procedures. - Identify single points of failure and drive remediation across infrastructure, data stores, and operational processes. What We're Looking For Experience & Technical Skills - 6+ years in DevOps, DevSecOps, SRE, platform engineering, infrastructure, or security engineering. - Strong hands-on AWS experience, including IAM, networking, logging, monitoring, and secure access patterns. - Solid CI/CD pipeline development and release automation experience; container build and deployment workflows. - Infrastructure-as-code with Terraform and/or Pulumi (Python); strong scripting in Python, Bash, or similar. - Strong Ubuntu/Linux command-line experience. - Strong networking fundamentals, including VPCs, DNS, TLS, routing, firewalls/security groups, load balancing, and private connectivity. - Observability tooling: logs, metrics, dashboards, alerts, and operational visibility. - Experience with secrets management, IAM, audit logging, vulnerability scanning, and secure configuration. - Strong hands-on experience with AI tools (e.g. Claude, ChatGPT) and AI-assisted development workflows, including an understanding of related security and data-handling risks. - Experience participating in 24/7 on-call operations and supporting high-reliability production systems. Security & Compliance - Hands-on experience supporting SOC 2 Type 2 and/or ISO 27001 frameworks. - Experience implementing controls for access management, change management, incident response, logging, and data protection. - Ability to translate compliance requirements into practical, repeatable technical controls. - Experience in regulated or security-sensitive environments (fintech, healthcare, enterprise SaaS) is a strong plus. Reliability & Collaboration - Strong understanding of distributed systems, failure modes, and resilience; experience with SLOs/SLIs and incident management. - Experience with backup, restore, failover, and disaster recovery procedures; familiarity with RTO/RPO planning. - Strong communication skills; comfortable working closely with a technical lead while independently owning deliverables. - Able to provide senior-level technical judgment and practical recommendations across DevSecOps, infrastructure, and security decisions. - Ownership mindset, strong documentation habits, and comfort operating in high-accountability production environments. Nice to Have - Jenkins, Docker, Kubernetes (including security, admission controls, and network policies). - AWS ECS Fargate, CloudWatch, ELK stack, Bedrock, Redis, redshift, and AWS Systems Manager (SSM). - Experience with SOC 2 Type 2 audit support and automated compliance evidence collection. - Disaster recovery testing, tabletop exercises, and production failover planning. - Fintech or other regulated industry background. - Bachelor's degree in Computer Science What We Offer - Competitive salary + equity. - Healthcare coverage. - 401k