20 days ago
USA (city not specified)Mid Level
H1B sponsor
Responsibilities
- Design and deliver cloud infrastructure changes that improve security through network isolation, identity-based access, infrastructure as code, and secure infrastructure defaults.
- Plan infrastructure rollouts that avoid customer downtime and coordinate application updates with service owners.
- Run vulnerability management, drive remediation within defined SLAs, and improve automation for processing security findings.
- Extend security scanning with AI-assisted security code review and AI-driven penetration testing.
- Manage third-party penetration tests from scoping through vendor coordination, findings intake, and retesting.
- Deploy and operate internal security, IT, and AI applications in Azure with appropriate identity, secrets, networking, and backups.
- Mature and operate internal AI-assisted penetration testing tooling, including deployment and scheduled runs.
- Build OpenTelemetry telemetry pipelines into Azure Monitor with dashboards and alerts for anomalous activity.
- Partner with DevOps, engineering, and IT & Security teams; write runbooks and documentation; and produce evidence for the SOC 2 program.
Requirements
- Fluent spoken and written English.
- At least 3 years of professional experience in DevOps, cloud infrastructure, platform engineering, or security engineering.
- Hands-on experience with Azure, AWS, or GCP, including networking, identity and access management, and secrets management.
- Production experience with infrastructure as code, preferably Terraform.
- Experience building and maintaining CI/CD pipelines.
- Working knowledge of containers and Kubernetes.
- Scripting skills in Python, PowerShell, or Bash.
- Understanding of common cloud and web application security risks and how to remediate them.
- Ability to explain technical risk clearly to technical and non-technical audiences.
- Preferred experience with Azure private endpoints, VNet integration, and Entra ID managed identities.
- Preferred experience with SCA, SAST, DAST, AI-assisted security testing, penetration testing coordination, external security firms, OpenTelemetry, Azure Monitor, alert queries, SOC 2, ISO 27001, or CIS Benchmarks.
- Security certifications such as AZ-500 or Security+ are a plus; logistics or transportation experience is also a bonus.
Tech Stack
AngularAWSAzureBashC#CloudflareDockerGitHub ActionsGoogle Cloud PlatformGrafanaKubernetes.NETPowerShellPythonReactTerraformTypeScript
About Alvys
Alvys builds a cloud-based transportation management system used by trucking carriers and freight brokers to run dispatch, accounting, EDI, and driver workflows. The company sells its multi-tenant SaaS platform by subscription and integrates with load boards, telematics, and accounting tools. Privately held and headquartered in Solana Beach, California, Alvys reports adoption by over 1,000 fleets in the U.S.