DevOps & Security Engineer

As our DevOps & Security Engineer, you’ll own how Vantage DX and MPA are built, deployed, and secured. That means running the CI/CD pipelines, hardening our AWS and Azure environments, and driving vulnerability remediation. You’ll also supply the technical evidence behind our compliance commitments. This is a hands-on role at a small company, so you’ll own a lot and your impact will be easy to see.

Key Responsibilities

Build, test automation, release, and deployment

• Own CI/CD pipelines, build infrastructure, & release automation covering cloud-hosted and on-premises delivery

• Maintain infrastructure as code & keep dev & production environments consistent

• Make releases repeatable, auditable, fast, and propose & deliver the build, test automation, and deployment improvements each product needs

• Remove verification bottlenecks that come with higher AI-driven code volume: automated security and quality gates on pull requests, AI-assisted review that feeds human review

• Help teams scale automated UI and regression testing (e.g. Playwright), so testing capacity grows with output. 

• Implement technical controls for AI coding tools, such as secrets scanning, license and provenance checks, & audit logging

• Report delivery-flow metrics: pull request size, time to review, test cycle time, & escaped defects

Production monitoring and reliability

• Run monitoring, alerting, & incident response for production services

• Lead root cause analysis & lessons learned after customer-impacting events

• Track & improve deployment frequency, change failure rate, & mean time to recovery

Hosting and network security

• Secure cloud hosting, with AWS and Azure including
  identity and access, secrets
  management, network segmentation, firewall
  and WAF rules, TLS, backups, and hardening

• Identity and access management including Keycloak single sign-on, OAuth/OIDC, and JWT handling

• Secrets handling, least-privilege access, safe processing of data

• Monitor services with OpenTelemetry, & track usage and cost

• Review network security configuration on a regular schedule & fix drift

• Run cloud infrastructure behind our applications: Kubernetes, Terraform, Docker, & cloud-init deployments, nginx, & scheduled jobs

• Experience operating LLM or AI agent workloads, AWS Bedrock,
  AgentCore, cost monitoring & guardrails

• Operate the vulnerability lifecycle across code, dependencies, & containers: scan, triage, and report. Set risk-based prioritization and severity-based remediation timelines, & drive down time to remediate

• Supply the technical evidence behind compliance work, such as scan results, remediation records, and SBOMs, for EU Cyber Resilience Act (CRA) reporting & customer security questionnaires
• Serve on the incident response team & the 24-hour on-call rotation

Required Qualifications

• 5+ years in DevOps, site reliability, or platform engineering

• Hands-on CI/CD (e.g., GitHub Actions), containers, & infrastructure as code e.g., Terraform with experience delivering both cloud and on-premises software

• Deep production experience hosting and securing workloads on AWS (e.g, IAM, CloudFront, ALB, S3, and SSM, nginx, kubernetes)

• Working knowledge of vulnerability management: code, dependency, and container scanning (e.g.,
  Trivy, Dependabot), triage, and remediation, including risk-based prioritization (e.g. severity scoring combined with exploitability data)
   

• Network security fundamentals: segmentation, firewalls and WAF, TLS, VPN, least-privilege access

• Production monitoring, on-call, incident response, and root cause analysis experience

• Scripting and automation in Python, Bash, or PowerShell
• Exposure to compliance frameworks such as CRA, SOC 2 or ISO 27001
  

About Martello

We provide modern workplace optimization solutions that monitor the performance of cloud collaboration and productivity tools to give enterprises insight into the user experience.

Martello offers a positive, diverse, and supportive culture. Martello Technologies is committed to supporting a culture of inclusion, diversity, and accessibility to employment for all. We are proud to operate as an equal opportunity employer.