Senior DevSecOps Engineer

Robert Half - San Francisco, CA

Full-time - Mid Level

San Francisco, CA

Administrative and Support Services

About the position

Robert Half is seeking a Senior DevSecOps Engineer with a strong background in Governance, Risk, and Compliance (GRC) to manage security posture and assist with regulatory compliance tasks. This role is a long-term contract opportunity that is fully remote, focusing on critical security and compliance initiatives for a rapidly growing organization.

Responsibilities

• Integrate legal, security, and operational requirements into systems to ensure compliance with frameworks such as SOC 2, GDPR, and OFAC.
• Manage SOC 2 compliance renewals, including auditing controls and working with Vanta for compliance readiness.
• Develop and maintain automation scripts in Python for security tasks and compliance monitoring.
• Manage IP tables and implement country-based access controls using Cloudflare.
• Assist in managing DevOps infrastructure with tools like Ansible and Kubernetes, ensuring secure deployment pipelines.
• Help manage Governance, Risk, and Compliance processes, particularly for data privacy standards.

Requirements

• Proven experience in DevSecOps with a focus on GRC (Governance, Risk, and Compliance).
• Familiarity with compliance frameworks such as SOC 2, GDPR, and OFAC.
• Experience with Vanta or other compliance management tools is preferred.
• Strong scripting skills in Python for automation and integration tasks.
• Hands-on experience with Ansible and Kubernetes for DevOps infrastructure management.
• Knowledge of Cloudflare for IP management and security controls.
• Familiarity with access control systems and security best practices.
• Excellent communication skills and ability to work cross-functionally with technical, legal, and business teams.

Nice-to-haves

• Experience with compliance management tools other than Vanta.

Benefits

• Medical insurance
• Vision insurance
• Dental insurance
• Life insurance
• Disability insurance
• 401(k) plan