DevSecOps Engineer

📋 Job Overview

At Tradeify, we're building a high-performance trading ecosystem that empowers traders around the world with capital, technology, education, and community. We operate across futures and crypto markets and partner with platforms like NinjaTrader and Tradovate to deliver a best-in-class trading experience. We're a rapidly scaling fintech serving a global trader community, and technology is at the center of everything we do. If you want to work on infrastructure and security where performance actually matters — where a 200ms lag on a dashboard is a real problem for real traders — this is a good place to do it.

🏢 About Tradeify

We are seeking a hands-on DevOps/SecOps Engineer to own the infrastructure, deployment pipelines, and security posture behind Tradeify's trading platform. This role splits evenly between building and hardening: shipping CI/CD and infrastructure improvements that let the engineering team move quickly, and running the security practices — monitoring, vulnerability management, incident response, compliance — that protect trader data and platform integrity. This is a great opportunity for a DevOps/security professional to take real ownership of a live trading platform's infrastructure and security program, working closely with engineering and leadership to make both a competitive advantage rather than a bottleneck. This role is fully remote (U.S.-based) and reports to the Head of Engineering / CTO.

🎯 The Role

Design, build, and maintain CI/CD pipelines (GitHub Actions + OIDC) across services and repositories. Manage and scale cloud infrastructure on AWS (EC2, S3, SES, ECR, Parameter Store, IAM). Own containerized deployments with Docker/Docker Compose, including reverse proxy and TLS termination (Caddy). Build and maintain infrastructure-as-code for repeatable, auditable environment provisioning. Improve observability across services — logging, metrics, tracing, and alerting for production systems. Support database operations (PostgreSQL, Redis) including backups, failover, and performance tuning. Own vulnerability management: scanning, triage, patching cadence, and remediation tracking across infrastructure and application layers. Design and enforce access control, secrets management, and least-privilege practices across cloud and CI/CD systems. Build and monitor security detection and alerting (intrusion detection, anomaly detection, log-based threat monitoring). Lead incident response: develop runbooks, coordinate response to security events, and drive postmortems. Support compliance and audit readiness relevant to a financial services/fintech environment. Perform security reviews of new infrastructure, integrations, and deployment changes before they ship. Champion secure-by-default practices across the engineering team (dependency hygiene, secrets scanning, hardened base images). Partner with engineering to reduce deployment friction and improve release reliability.

✅ Key Responsibilities

• Design, build, and maintain CI/CD pipelines (GitHub Actions + OIDC) across services and repositories.
• Manage and scale cloud infrastructure on AWS (EC2, S3, SES, ECR, Parameter Store, IAM).
• Own containerized deployments with Docker/Docker Compose, including reverse proxy and TLS termination (Caddy).
• Build and maintain infrastructure-as-code for repeatable, auditable environment provisioning.
• Improve observability across services — logging, metrics, tracing, and alerting for production systems.
• Support database operations (PostgreSQL, Redis) including backups, failover, and performance tuning.
• Own vulnerability management: scanning, triage, patching cadence, and remediation tracking across infrastructure and application layers.
• Design and enforce access control, secrets management, and least-privilege practices across cloud and CI/CD systems.
• Build and monitor security detection and alerting (intrusion detection, anomaly detection, log-based threat monitoring).
• Lead incident response: develop runbooks, coordinate response to security events, and drive postmortems.
• Support compliance and audit readiness relevant to a financial services/fintech environment.
• Perform security reviews of new infrastructure, integrations, and deployment changes before they ship.
• Champion secure-by-default practices across the engineering team (dependency hygiene, secrets scanning, hardened base images).
• Partner with engineering to reduce deployment friction and improve release reliability.

📌 Required Qualifications

• Experience owning both infrastructure/DevOps and security operations responsibilities, or a strong track record in one with real depth in the other.
• Production experience with AWS (EC2, S3, IAM, ECR, Parameter Store or equivalent secrets management).
• Strong Docker/containerization experience, including writing and hardening Dockerfiles and Compose configurations.
• CI/CD pipeline design and maintenance (GitHub Actions or equivalent), including OIDC-based cloud authentication.
• Experience with vulnerability scanning, patch management, and remediation workflows.
• Solid understanding of network and application security fundamentals (TLS, firewalls, IAM, least privilege).
• Experience with PostgreSQL and Redis in production, including operational concerns (backups, monitoring, scaling).
• Comfort with Linux systems administration and shell scripting for automation.
• Incident response experience — able to lead through an active issue, not just document it after the fact.
• Independent work capability in a startup environment with high ownership and minimal hand-holding.
• Strong written communication — comfortable documenting runbooks, postmortems, and security findings clearly.

⭐ Desirable Experience

• Fintech, trading, or other regulated-industry experience.
• Familiarity with the broader Tradeify stack: Next.js/React, Python/FastAPI, TypeScript, BullMQ + Redis for background jobs.
• Experience with SIEM tooling, SOC workflows, or managed detection and response platforms.
• Exposure to compliance frameworks (SOC 2, PCI DSS, or similar).
• Infrastructure-as-code tooling (Terraform, Pulumi, CloudFormation, or similar).
• Experience with reverse proxies and TLS automation (Caddy, nginx, Traefik).
• AI-assisted development workflow familiarity (Claude Code or similar).

🎁 Benefits

Join a professional-grade futures trading firm at a pivotal stage of growth. Real, fast-moving trading platform serving thousands of traders where performance and security genuinely matter. High ownership from day one — shape infrastructure and security practices rather than inherit rigid process. Small team structure with direct influence on architecture and tooling decisions. High-performance culture that rewards ownership, curiosity, and results. Competitive base salary, performance bonuses, and comprehensive benefits. Be a foundational member of the infrastructure and security function at a growing fintech company.

🛂 Visa & Eligibility

U.S.-based remote role.