Role Description Intetics Inc., a global technology company providing custom software application development, distributed professional teams, software product quality assessment, and “all-things-digital” solutions, is seeking a highly skilled and experienced DevSecOps Lead to join our dynamic team on a full-time basis. Your Responsibilities - Security & Compliance (Primary Focus) - Lead implementation of PCI DSS controls across infrastructure and application layers - Design secure AWS architectures (VPC segmentation, IAM boundaries, least privilege) - Implement encryption standards (data at rest & in transit) - Set up and manage security tooling (e.g. WAF, GuardDuty, logging/monitoring) - Work directly with auditors and internal stakeholders - Infrastructure & DevSecOps - Own AWS infrastructure using Infrastructure as Code (SST / CDK / Pulumi / Terraform) - Improve deployment reliability and environment consistency - Integrate security into CI/CD pipelines - Implement secrets management and secure configuration practices - Platform Stability & Scalability - Architect systems for high-volume financial transactions - Improve reliability, fault tolerance, and observability - Optimise cloud architecture for performance and cost - Leadership & Mentorship - Act as the internal Security Champion - Define best practices for cloud architecture and secure development - Mentor engineers on secure coding and infrastructure practices Qualifications - 4+ years in DevOps, Platform Engineering, or Backend Infrastructure - Strong hands-on AWS experience in production environments - Proven experience working on or implementing PCI DSS, SOC 2, or ISO 27001 - Experience with Infrastructure as Code (CDK, Terraform, Pulumi, etc.) - Deep understanding of: IAM & least privilege, Network security (VPCs, subnets, isolation), Encryption & secrets management - Experience building or maintaining secure, scalable systems Nice to Have - Experience in fintech, payments, or high-compliance environments - Familiarity with Node.js / TypeScript environments - Experience with monitoring, logging, and incident response systems Tech Environment - TypeScript / Node.js - NestJS services - PostgreSQL, DynamoDB, MongoDB - CI/CD pipelines

• Desplegar infraestructuras mediante Terraform y herramientas de Infraestructura como Código (IaC). • Desarrollar scripts y utilidades en Python para automatizar procesos operativos. • Operar y optimizar entornos Cloud en AWS y Azure. • Integrar y mantener APIs y servicios asociados. • Gestionar repositorios y pipelines de integración continua con GitHub y GitHub Actions. • Colaborar con arquitectos y líderes técnicos para definir buenas prácticas, estándares de despliegue y automatización.

Title: Evergreen Posting: DevSecOps Engineer Location: Remote (select US states) Department: Engineering Employment Type Full Time Workplace type Fully remote Job Description: We are actively building a pipeline of talented individuals in anticipation of upcoming project needs. By applying to this evergreen position, you recognize that while an immediate vacancy may not exist, you are eager to be part of our future cross-disciplinary efforts to improve lives through human-centered technology. Our DevSecOps Engineers enjoy tackling complex problems while working with other members of our cross-disciplinary teams to deliver elegant products across a modern technology stack. They are skilled experts across the stack, building accessible applications that put people first with code that is clean, maintainable, well-documented, and well-tested. They oversee builds, deployments, automated processes, and CI/CD pipelines, and are experienced at using infrastructure as code. At Coforma, engineers work closely with researchers and designers throughout a project's lifecycle, collaborating to add perspective and increase understanding. As such, your passion for articulating technology solutions that aim to improve lives is a feature, not a bug. Join us in building software that makes an impact and implementing human-centered solutions we can be proud to say we worked on together. Note: We're a remote-first organization, but some roles may require occasional travel. If a role has travel requirements or a hybrid or full time in-office schedule, this will be disclosed at the beginning of the hiring process. We participate in E-Verify. Upon hire, we will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the United States. Due to the nature of our work with the US federal government, all roles are required to work from the contiguous United States. Remote positions are open to applicants in the states listed below. To ensure we remain compliant with all state, county, and local employment and tax regulations, applicants must currently reside in one of the following states to be considered for employment with Coforma. This list will be updated periodically as our PeopleOps team works to open up hiring in additional states. - Arizona - California - District of Columbia - Florida - Georgia - Idaho - Illinois - Maryland - Massachusetts - Montana - Nevada - New Jersey - New York - North Carolina - Oregon - South Carolina - Tennessee - Texas - Virginia - Washington - Wisconsin What You'll Do (Key Responsibilities) - Write and review code, ensuring high standards of quality, maintainability, and test coverage - Solve problems across the tech stack alongside other engineers on the team, building new systems and improving existing ones - Lead other developers through ideation and articulation of solutions with an eye toward integration and reducing burden and tech debt - Consistently apply best practices, including a focus on accessibility - Collaborate with team members and government/client stakeholders to craft creative solutions and build technology products that improve the lives of those in the communities they serve - Engage with coworkers across disciplines according to agile and Scrum methodologies, including participating in planning, breaking down requirements into tasks, refinement, and estimation, etc. What You Know (Knowledge and Experience Requirements) - Open-source programming languages, like JavaScript/TypeScript, Ruby, Python, Java, etc. - Frameworks, libraries, or runtimes, like React, Rails, Node, Next, Angular, Spring, etc. - Testing frameworks like Jest, Testing Library, Mocha, Playwright, Cypress, etc. - How to leverage the command line via shell scripting - APIs and databases of various types, like SQL, Dynamo, Mongo, Postgres, etc. - Infrastructure tools like Terraform, Serverless, Amazon CDK, etc. - CI/CD tools like GitHub Actions, Jenkins, Circle, etc. - Cloud platforms like AWS, Azure, etc. - Observability and monitoring tools like Datadog, Splunk, SonarQube, NewRelic, Nessus, etc. - Security best practices like vulnerability scanning and remediation, threat modeling and detection, and static and dynamic testing - How to deliver polished, scalable, maintainable, performant code - How to communicate complex technical concepts to non-technical audiences - Agile and Scrum development methodologies Preferred Qualifications and Experience: - 3 or more years of experience building applications with open-source programming languages, modern frameworks, libraries, or runtimes - Prior experience in developing software in the digital services, government, or federal consulting space - 3 or more years of experience working with APIs and databases of various types - 3 or more years of experience working with modern testing frameworks, libraries, and testing services via APIs of various types - 3 or more years of experience working with cloud platforms, infrastructure tools, and IAC - 3 or more years of experience with observability and monitoring tools - 3 or more years of experience integrating CI/CD and pipeline tools Other - Internet: Will prioritize and maintain access to strong, reliable internet for the remote nature of our work, except when on vacation or holiday. - Security: Will keep the highest security practices to ensure privacy and security of Coforma and client information, given the nature of our work, even when on vacation. - Travel Flexibility: On request and with advanced notice, will attend in-person events such as meetings, workshops, and trainings as assigned for projects that require it. - Brand Representation: Will represent Coforma professionally and sincerely, modeling our Company Values in all interactions. About Coforma We believe ethical technology begins with responsible innovation. We’re a remote-first company that values collaboration, inclusivity, transparency, autonomy with accountability, and ethical design processes to facilitate responsible innovation and collaboration. Our cross-functional team works closely with each other and with our government, nonprofit, and commercial partners to research, design, and build better products and services. From empowering patients navigating surprise medical bills to streamlining the digital claims process for Veterans, we’re dedicated to improving people’s lives through thoughtful technology products and services. Together. Equal Opportunity & Inclusive Workplace Coforma is an Equal Employment Opportunity (EEO) employer. It's our policy to provide equal employment opportunities to all qualified applicants without regard to race, religion, sex, gender, age, disability, military or veteran status, or any other factors protected under federal, state, or local law.

• Design, develop, and maintain robust infrastructure solutions using IaC principles and tools like Terraform and Ansible. • Automate the provisioning, deployment, and scaling of infrastructure components across various environments. • Proactively identify opportunities to improve infrastructure performance, scalability, and cost-effectiveness, implementing optimized solutions. • Collaborate closely with development teams to understand their workflows and optimize build, test, and deployment processes. • Implement automated testing strategies to ensure the high quality and stability of software releases. • Integrate security practices and controls throughout the software development lifecycle (Shift-Left security). • Maintain and enhance security controls and validate compliance, ensuring the security and integrity of our systems. • Implement comprehensive monitoring and alerting systems to proactively detect and respond to performance and security issues. • Act as a key responder to incidents, troubleshoot system failures, and perform thorough root cause analysis to prevent future occurrences. • Continuously improve system observability, reliability, and resilience through effective monitoring and incident response strategies. • Actively participate in cross-functional team efforts, fostering collaboration and knowledge sharing with development and operations teams. • Create and maintain clear, concise documentation for processes, configurations, and best practices, ensuring smooth onboarding and knowledge transfer.