Senior DevSecOps Engineer

Description

At Infinidat, a Lenovo company, we help enterprises and service providers empower their data-driven competitive advantage at scale.

As our Senior DevSecOps Engineer, you will be the foundational security expert within the DevOps team.

Following a recent corporate transition, our infrastructure is moving into a highly regulated environment subject to strict, ongoing security compliance frameworks and external audits. You will lead the charge in designing, securing, and continuously adapting our infrastructure to meet these evolving enterprise and regulatory standards.

Your immediate priority will be securing the environments where protected data is stored across public cloud infrastructure, on-premise virtual environments, and containerized clusters. Beyond immediate compliance, you will architect our secure cloud posture from the ground up, embed automated security guards seamlessly into our deployment pipelines, and mentor the broader engineering team on modern security practices.

Responsibilities

• Compliance & Audit Leadership: Serve as the primary technical lead for rigorous security audits, ensuring continuous compliance, rapid adaptation to new security requirements, and production of audit-ready documentation.
• Infrastructure Hardening & Governance: Own, scale, and maintain automated machine image hardening pipelines utilizing industry-standard security baselines (such as CIS benchmarks). Extend these frameworks to define and enforce strict security baselines across container clusters and image registries.
• Secure Architecture & Networking: Architect secure hybrid environments handling sensitive data, focusing on robust network segmentation, zero-trust principles, and secure infrastructure-as-code deployment methodologies.
• Application Security Integration: Manage and optimize the integration of automated security scanning tools (SAST, SCA, and DAST) into CI/CD pipelines. Ensure reliable capture, aggregation, and reporting of scan results to satisfy product governance and audit requirements.
• Threat Detection & Observability: Implement and manage anomaly detection tools, automated access log review mechanisms, and comprehensive centralized auditing and logging solutions.
• Security Incident Response: Serve as the primary technical escalation point for infrastructure security incidents, creating automated playbooks for rapid triage and mitigation.
• Mentorship: Act as the security subject matter expert, identifying technical gaps and upskilling the DevOps and development teams in secure infrastructure concepts.

Requirements

• Proven experience as a Senior DevSecOps, Cloud Security, or Security Infrastructure Engineer.
• Deep, hands-on expertise securing public cloud environments (AWS preferred) and container orchestration platforms (Kubernetes).
• Strong background with Infrastructure as Code (IaC) and modern GitOps/declarative continuous delivery workflows.
• Demonstrated experience navigating strict compliance frameworks, government regulations, or protected data environments (e.g., NIST, FedRAMP, CIS, or equivalent federal/enterprise frameworks).
• Experience configuring enterprise-scale logging, continuous monitoring, and automated configuration compliance tools.
• Exceptional communication skills, with the ability to translate complex security requirements into clear engineering tasks.

About Infinidat

Infinidat’s enterprise storage portfolio provides global Fortune 500 enterprises and service providers with best-in-class solutions for primary storage, next-generation data protection, disaster recovery, business continuity, and cyber resilience. Infinidat’s acclaimed InfuzeOS is the one of the most flexible and complete enterprise software-defined storage architectures in the industry. We recently announced powerful enhancements, an extensive expansion, and the dynamic evolution of our award-winning G4 enterprise cyber and AI storage solutions!

Not only did Infinidat win over 40 awards in 2025, but was named a Gartner® Peer Insights™ Voice of the Customer Award for Primary Storage for the 7th time!