DevSecOps Engineer

Join the Ritz-Carlton Yacht Collection:  Where Every Voyage is a Symphony of Luxury Embark on an extraordinary journey with the Ritz-Carlton Yacht Collection, an exquisite extension of the renowned Ritz-Carlton brand, dedicated to redefining ultra-luxury hospitality at sea. As a "Lady or Gentleman" of our esteemed team, you'll be entrusted with the art of delivering the impeccable "Gold Standards" that have made the Ritz-Carlton an epitome of excellence across the globe.   The Essence of Excellence: The Gold Standards The Gold Standards are the bedrock of the Ritz-Carlton experience, setting us apart in the industry and establishing a legacy of unparalleled service. These standards embody the values and culture that define our brand, and serve as the compass guiding our every endeavor.   The Employee Promise At The Ritz-Carlton, our Ladies & Gentlemen are the most important resource in our service commitment to each other and our guests. By applying the principles of trust, honesty, respect, integrity, and commitment, we empower and nurture talent to the benefit of each individual and the company. The Ritz-Carlton fosters a culture where all are valued, quality of life is enhanced, individual aspirations are fulfilled, and The Ritz-Carlton Mystique is strengthened. Join us on a journey where every day is a testament to the highest standard of luxury and service. Apply now and be part of an unparalleled legacy in hospitality. Key Responsibilities DevSecOps Strategy & Automation • Design and implement enterprise DevSecOps frameworks and best practices. • Build and maintain CI/CD pipelines with integrated security controls. • Automate infrastructure provisioning using Infrastructure as Code (IaC). • Implement Infrastructure Automation practices. • Standardize release management and deployment processes. Cloud & Infrastructure Security • Secure AWS and Azure Cloud environments. • Implement cloud security controls, policies, and governance frameworks. • Manage identity and access management (IAM), secrets management, and privileged access controls. • Design secure network architectures and container security solutions. Application & Software Security • Integrate Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and container scanning into CI/CD pipelines. • Collaborate with development teams to remediate vulnerabilities. • Establish secure coding standards and conduct security reviews. • Implement automated compliance and policy enforcement. • Secure Docker environments. Monitoring & Incident Response • Develop observability and monitoring solutions. • Implement SIEM integration, security alerting, and threat detection. • Participate in incident response and root cause analysis. • Create dashboards for operational and security metrics. Governance, Risk & Compliance • Support compliance initiatives including SOX, PCI-DSS, GDPR, ISO 27001, SOC 2, HIPAA, or similar frameworks. • Conduct security assessments and audits. • Develop security documentation, standards, and procedures. • Track and report security KPIs and risk metrics. Collaboration & Leadership • Partner with engineering, security, architecture, and operations teams. • Mentor developers and operations teams on DevSecOps best practices. • Drive continuous improvement across software delivery processes. • Evaluate and recommend emerging DevSecOps technologies. Required Qualifications Education • Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or related field. • Equivalent practical experience may be considered. Experience • 5+ years of experience in DevOps, DevSecOps, Cloud Engineering, or Security Engineering. • Experience managing enterprise CI/CD environments. • Experience implementing security controls in cloud-native architectures. Technical Skills CI/CD & DevOps • GitHub Actions • Azure DevOps • Jenkins Cloud Platforms • AWS • Microsoft Azure Infrastructure as Code • Terraform • CloudFormation • Ansible Containers & Orchestration • Docker Security Tools • SonarQube • Defender for Cloud Monitoring & Observability • Prometheus • Grafana • ELK Stack Scripting & Programming • Python • PowerShell • Bash • YAML • JSON Preferred Certifications • AWS Certified Security Specialty • AWS Certified DevOps Engineer Professional • Microsoft Certified: Azure Security Engineer Associate • Microsoft Certified: DevOps Engineer Expert • Certified Kubernetes Security Specialist (CKS) • CISSP • CEH • Certified DevSecOps Professional (CDP) Key Competencies • Security-first mindset • Strong automation skills • Cloud architecture expertise • Problem solving and troubleshooting • Risk assessment and governance • Cross-functional collaboration • Communication and stakeholder management • Continuous improvement mindset Success Metrics • Reduced security vulnerabilities in production. • Increased CI/CD deployment success rate. • Reduced mean time to detect (MTTD) and mean time to recover (MTTR). • Higher infrastructure automation coverage. • Improved compliance audit outcomes. • Increased deployment frequency with reduced risk. The Ritz-Carlton Yacht Collection is an Equal opportunity, inclusive employer and will consider all applicants for employment with the Company on the basis of merit, competence and qualifications without regard to race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, or any other category protected by federal, state, or local law.