Senior Platform DevSecOps Engineer
Future Secure AI
Salary undisclosed
Need a reasonable accommodation to apply or interview? Contact us.
JobMinglr uses automated technology to recommend jobs based on profile information and job preferences. Match Score does not determine eligibility for a position, prevent a user from viewing or applying to a job, or make hiring decisions on behalf of an employer.
Description
About the Company
At Future Secure AI, we're building something genuinely new — and we're looking for people bold enough to build it with us. We work at the frontier of AI, tackling big, real-world problems for global enterprises across multiple industries, armed with state-of-the-art technology and a culture that prizes courage, rigor, and relentless curiosity. Our BRAVER values aren't just words on a wall — they describe the kind of people we are and the standard we hold ourselves to every day. Our leadership team is entrepreneurial, experienced, and accessible, with an open-door policy that means you'll never be just a number here. We invest seriously in your growth because we know our success depends on yours. If you're ready to work alongside some of the brightest minds in the industry, push into uncharted territory, and do work that genuinely matters, Future Secure AI is the place for you.
About the Role
We are hiring a Platform DevSecOps Engineer to take total ownership of the Secure Software Development Lifecycle (SSDLC) for our agent harness (the platform on which our AI agents run) and the agents themselves. You will be the single point of accountability for security across how these systems are built, configured, deployed, and operated, and the internal champion who makes secure-by-default the path of least resistance for every team that touches them. This is a hands-on platform security role, not a governance or compliance-desk role: you will live in the pipelines, the infrastructure-as-code, the Kubernetes clusters, and the secrets management, and you will spend as much time influencing people as you do writing configuration.
This role does not cover overall corporate security governance, including IT/fleet and device management, endpoint administration, or corporate compliance-framework attestation (SOC 2, ISO 27001, and similar). Those sit with our corporate security and IT functions, and you will collaborate with them where platform security intersects without being accountable for them.
Responsibilities
- Own end-to-end SSDLC for the agent harness and the agents: threat modeling, secure design review, pre-merge scanning, supply-chain integrity, runtime hardening, and vulnerability remediation from discovery through verified rollout
- Define security best practices for base-platform and agent configuration, encoding them into the GitOps and CI/CD paths so they're enforced automatically rather than by memo, and hold the line on them in review
- Drive supply-chain security, including SBOM/VEX generation, dependency provenance, artifact signing/promotion controls, and keeping build and dependency resolution flowing through trusted internal registries rather than the open internet
- Drive CVE remediation campaigns across multiple clusters and cloud accounts to measurable targets (e.g., zero critical findings), coordinating rollouts without regressing running workloads
- Enforce secrets and identity hygiene, including encrypted-at-rest secrets in GitOps, workload identity federation, and least-privilege access across cloud and cluster
- Partner with platform engineers, application/agent developers, SRE, and non-technical stakeholders (product, leadership, customer-facing teams) to move security objectives forward and translate risk into terms each audience acts on
Minimum Qualifications
- Deep, practical DevSecOps experience securing real pipelines and real clusters, not just writing policy about them
- Fluency with GitOps as the mechanism for change, and the instinct to enforce security in the pipeline rather than around it
- Strong multi-cloud Kubernetes security background (AWS and/or Azure)
- A track record of driving vulnerability remediation to completion across a fleet without breaking production
- Excellent communication skills, able to make a security case land with a staff engineer and with a non-technical executive in the same conversation
- An ownership mindset, treating total ownership of the SSDLC as a mandate rather than a slogan
Preferred Qualifications
- Direct experience with our stack: Kubernetes on AWS EKS and Azure AKS, Terraform/Terragrunt, Helm/Helmfile, and ArgoCD for GitOps-driven continuous delivery
- Experience with GitHub Actions and OIDC-based cloud authentication, SAST tooling (e.g., CodeQL), and SBOM/VEX generation and consumption
- Experience with artifact registries and promotion/signing controls (e.g., JFrog Artifactory, container and OCI registries)
- Experience with SOPS-encrypted secrets, workload identity (AWS IRSA, Azure Workload Identity), and cloud IAM/RBAC and KMS/Key Vault
- Relevant certifications such as CKS, CKA/CKAD, AWS Certified Security – Specialty, AZ-500, Terraform Associate, GIAC GCSA/GCLD, CISSP, or Security+ (none strictly required, but signal relevant depth)
Why Join Us?
- A high-performance culture
- State-of-the-art technology
- Experience world-class leadership
- Scale of impact and purpose
- A competitive salary and a huge growth trajectory
- Work with the best in the industry
- Flexible work environment
- Diversity and creativity
Future Secure AI Privacy Policy
At Future Secure AI, we are committed to protecting your privacy and adhering to the principles of the General Data Protection Regulation (GDPR) and the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). Our Privacy Policy outlines how we collect, use, share, and protect your personal data when you visit our website at www.futuresecure.ai (the "Website") and use our services.
About this role
Future Secure AI is looking for someone to own security across their entire AI agent platform—from how code gets built and deployed through how it runs in production. You'll be the single point of accountability for the secure software development lifecycle of both the agent harness and the agents themselves, which means you'll spend your time in pipelines, infrastructure-as-code, Kubernetes clusters, and secrets management, while also influencing the teams who touch these systems. This is hands-on platform security work, not a compliance or governance desk role.
The core of the job is making secure-by-default the easiest path for every team. You'll define security best practices and encode them directly into GitOps and CI/CD so they're enforced automatically rather than requiring constant oversight. You'll drive supply-chain security (SBOM, artifact signing, dependency provenance), run CVE remediation campaigns across multiple clusters and cloud accounts to measurable targets, and manage secrets and identity hygiene at scale. You'll also partner across platform engineers, developers, SRE, product, and leadership to translate security risk into language each group acts on.
To succeed here, you need deep, practical DevSecOps experience securing real pipelines and clusters in multi-cloud Kubernetes environments (AWS and/or Azure), fluency with GitOps as your enforcement mechanism, and a proven track record of driving vulnerability remediation to completion without breaking production. Strong communication skills are essential—you'll need to make security cases land with both staff engineers and non-technical executives. Experience with the specific stack (EKS, AKS, Terraform, ArgoCD, GitHub Actions, SOPS, workload identity) is preferred but not required. The role is full-time and in-office in Austin, Texas.
How this employer is doing
average
- H1B: Sponsors Visas
- Sponsors Visas
This role's local market on JobMinglr
Pay for this role
The employer didn't post a pay range for this role. That usually means pay is set in negotiation, which favors whoever arrives with numbers. Check ranges on comparable Senior Platform DevSecOps Engineer postings in Austin, and analyze any offer before you accept it.
Before you apply, worth reading
How JobMinglr reads this job
Every listing here is scored against your profile before you apply: skills overlap, experience level, location and work arrangement, each weighted and explained. You see the score and the reasons, not just a list. How the matching works.