DevOps & Security Engineer

• As our DevOps & Security Engineer, you’ll own how Vantage DX and MPA are built, deployed, and secured. That means running the CI/CD pipelines, hardening our AWS and Azure environments, and driving vulnerability remediation. You’ll also supply the technical evidence behind our compliance commitments.
• This is a hands-on role at a small company, so you’ll own a lot and your impact will be easy to see.

Key Responsibilities

Build, test automation, release, and deployment

Own CI/CD pipelines, build infrastructure, & release automation covering cloud-hosted and on-premises delivery

Maintain infrastructure as code & keep dev & production environments consistent

Make releases repeatable, auditable, fast, and propose & deliver the build, test automation, and deployment improvements each product needs

Remove verification bottlenecks that come with higher AI-driven code volume: automated security and quality gates on pull requests, AI-assisted review that feeds human review

Help teams scale automated UI and regression testing ( e.g. Playwright), so testing capacity grows with output.

Implement technical controls for AI coding tools, such as secrets scanning, license and provenance checks, & audit logging

Report delivery-flow metrics: pull request size, time to review, test cycle time, & escaped defects

Production monitoring and reliability

Run monitoring, alerting, & incident response for production services

Lead root cause analysis & lessons learned after customer-impacting events

Track & improve deployment frequency, change failure rate, & mean time to recovery

Hosting and network security

• •Secure cloud hosting, with AWS and Azure including
• identity and access, s ecrets
• management, network segmentation, f irewall
• and WAF rules, TLS, backups, and hardening

Identity and access management including Keycloak single sign-on, OAuth/OIDC, and JWT handling

S ecrets handling, least-privilege access , safe processing of data

Monitor services with OpenTelemetry , & track usage and cost

Review network security configuration on a regular schedule & fix drift

Run cloud infrastructure behind our applications: Kubernetes, Terraform, Docke r, & cloud- init deployments, nginx, & scheduled jobs

• •Experience operating LLM or AI agent workloads, AWS Bedrock,
• AgentCore , cost monitoring & guardrails

Operate the vulnerability lifecycle across code, dependencies, & containers: scan, triage, and report. Set risk-based prioritization and severity-based remediation timelines, & drive down time to remediate

Supply the technical evidence behind compliance work, such as scan results, remediation records, and SBOMs, for EU Cyber Resilience Act (CRA) reporting & customer security questionnaires

Serve on the incident response team & the 24-hour on-call rotation

Required Qualifications

5+ year s in DevOps, site reliability, or platform engineering

Hands-on CI/CD (e.g., GitHub Actions), containers, & infrastructure as code e.g., Terraform with experience delivering both cloud and on-premises software

Deep production experience hosting and securing workloads on AWS (e.g, IAM, CloudFront, ALB, S3, and SSM , nginx, kubernetes)

• •Working knowledge of vulnerability management: code, dependency, and container scanning ( e.g.,
• Trivy , Dependabot ), triage, and remediation, including risk-based prioritization ( e.g. severity scoring combined with exploitability data)

Network security fundamentals: segmentation, firewalls and WAF, TLS, VPN , least -privilege access

Production monitoring, on-call, incident response, and root cause analysis experience

Scripting and automation in Python, Bash, or PowerShell

Exposure to compliance frameworks such as CRA, SOC 2 or ISO 27001

About Martello

We provide modern workplace optimization solutions that monitor the performance of cloud collaboration and productivity tools to give enterprises insight into the user experience.

Martello offers a positive, diverse, and supportive culture. Martello Technologies is committed to supporting a culture of inclusion, diversity, and accessibility to employment for all. We are proud to operate as an equal opportunity employer.