DevSecOps Engineer AWS Terraform

About the Role

We’re looking for a DevSecOps Engineer AWS Terraform to help scale a modern identity security platform (similar to Lumos) using an everything-as-code approach. This role is hands-on and highly technical: you’ll be responsible for securing the internal network, enforcing firewall policies, and ensuring compliance with cybersecurity standards — not through manual configuration, but through code-driven infrastructure and security controls.

This is not a role focused only on AWS setup. It’s a security-first infrastructure position with strong ownership over network security, cloud firewall strategy, and secure pipelines.

Main Responsibilities

• Build and scale a modern Identity Governance & Administration (IGA) security platform using infrastructure-as-code
• Secure internal and cloud network environments using policy-based firewall management
• Implement and maintain security controls aligned with standards such as UK Cyber Essentials Plus
• Manage and automate cloud security infrastructure primarily in AWS (90%+ of the environment)
• Define and enforce firewall/WAF configurations using:
  • Cloudflare WAF
  • AWS Network Firewall / Cloud Firewall
• Strengthen CI/CD security and reduce attack surface using:
  • GitHub Advanced Security
  • CircleCI
• Ensure infrastructure, firewall rules, and security controls are versioned, reviewed, and deployed through code

Requirements

• Strong hands-on experience with Terraform (absolute must)
• Strong hands-on experience with AWS (absolute must)
• Solid background in network security (internal networks, firewall strategy, segmentation, secure access)
• Experience implementing security controls through code (Infrastructure-as-Code / Security-as-Code)
• Experience with CI/CD pipelines and security best practices
• Comfortable working in a security-focused environment with compliance requirements

Nice-to-Have

• Networking certifications (e.g., CCNA, CCNP, AWS Advanced Networking, etc.)
• Experience working with UK Cyber Essentials Plus (or similar frameworks)
• Experience scaling IGA/security automation platforms (Lumos-like tools)

Tech Stack / Tools

• AWS (primary cloud)
• Terraform
• Cloudflare WAF
• AWS Network Firewall / Cloud Firewall
• GitHub Advanced Security
• CircleCI
• Security + compliance standards (e.g., Cyber Essentials Plus)

Why Join Us?

We offer a supportive and rewarding work environment with benefits designed to help you thrive:

• Full-Time Position: Stability and growth in a dedicated role 🕒
• Competitive Compensation: Paid in US dollars 💵
• 100% Remote: Work from anywhere in Latin America🏡.
• Paid Time Off: 12 PTO days per year 🌴.
• Local Holidays: All official holidays in your country 🎉.
• Birthday Off: Take your special day off 🎂.
• Career Growth: Clear paths for professional development 📈.
• Recognition Program: Celebrate achievements and contributions 🏆.
• Paid Leaves: Fully covered approved leaves 📝.

If you meet these requirements and are interested in applying, we’d love to hear from you! ✨

Key skills/competency

• DevSecOps
• AWS
• Terraform
• Network Security
• Cloud Firewall
• Infrastructure-as-Code
• CI/CD Security
• Compliance
• Identity Governance & Administration (IGA)
• Security Automation