DevOps & Security Engineer
As our DevOps & Security Engineer, you’ll own how Vantage DX and MPA are built, deployed, and secured. That means running the CI/CD pipelines, hardening our AWS and Azure environments, and driving vulnerability remediation. You’ll also supply the technical evidence behind our compliance commitments.
This is a hands-on role at a small company, so you’ll own a lot and your impact will be easy to see.
Key Responsibilities
Build, test automation, release, and deployment
Own CI/CD pipelines, build infrastructure, & release automation covering cloud-hosted and on-premises delivery
Maintain infrastructure as code & keep dev & production environments consistent
Make releases repeatable, auditable, fast, and propose & deliver the build, test automation, and deployment improvements each product needs
Remove verification bottlenecks that come with higher AI-driven code volume: automated security and quality gates on pull requests, AI-assisted review that feeds human review
Help teams scale automated UI and regression testing ( e.g. Playwright), so testing capacity grows with output.
Implement technical controls for AI coding tools, such as secrets scanning, license and provenance checks, & audit logging
Report delivery-flow metrics: pull request size, time to review, test cycle time, & escaped defects
Production monitoring and reliability
Run monitoring, alerting, & incident response for production services
Lead root cause analysis & lessons learned after customer-impacting events
Track & improve deployment frequency, change failure rate, & mean time to recovery
Hosting and network security
Secure cloud hosting, with AWS and Azure including
identity and access, s ecrets
management, network segmentation, f irewall
and WAF rules, TLS, backups, and hardening
Identity and access management including Keycloak single sign-on, OAuth/OIDC, and JWT handling
S ecrets handling, least-privilege access , safe processing of data
Monitor services with OpenTelemetry , & track usage and cost
Review network security configuration on a regular schedule & fix drift
Run cloud infrastructure behind our applications: Kubernetes, Terraform, Docke r, & cloud- init deployments, nginx, & scheduled jobs
Experience operating LLM or AI agent workloads, AWS Bedrock,
AgentCore , cost monitoring & guardrails
Operate the vulnerability lifecycle across code, dependencies, & containers: scan, triage, and report. Set risk-based prioritization and severity-based remediation timelines, & drive down time to remediate
Supply the technical evidence behind compliance work, such as scan results, remediation records, and SBOMs, for EU Cyber Resilience Act (CRA) reporting & customer security questionnaires
Serve on the incident response team & the 24-hour on-call rotation
Required Qualifications
5+ year s in DevOps, site reliability, or platform engineering
Hands-on CI/CD (e.g., GitHub Actions), containers, & infrastructure as code e.g., Terraform with experience delivering both cloud and on-premises software
Deep production experience hosting and securing workloads on AWS (e.g, IAM, CloudFront, ALB, S3, and SSM , nginx, kubernetes)
Working knowledge of vulnerability management: code, dependency, and container scanning ( e.g.,
Trivy , Dependabot ), triage, and remediation, including risk-based prioritization ( e.g. severity scoring combined with exploitability data)
Network security fundamentals: segmentation, firewalls and WAF, TLS, VPN , least -privilege access
Production monitoring, on-call, incident response, and root cause analysis experience
Scripting and automation in Python, Bash, or PowerShell
Exposure to compliance frameworks such as CRA, SOC 2 or ISO 27001
About Martello
We provide modern workplace optimization solutions that monitor the performance of cloud collaboration and productivity tools to give enterprises insight into the user experience.
Martello offers a positive, diverse, and supportive culture. Martello Technologies is committed to supporting a culture of inclusion, diversity, and accessibility to employment for all. We are proud to operate as an equal opportunity employer.