Staff Engineer, DevOps - DevsecOps

About Tekion:

Positively disrupting an industry that has not seen any innovation in over 50 years, Tekion has challenged the paradigm with the first and fastest cloud-native automotive platform that includes the revolutionary Automotive Retail Cloud (ARC) for retailers, Automotive Enterprise Cloud (AEC) for manufacturers and other large automotive enterprises and Automotive Partner Cloud (APC) for technology and industry partners. Tekion connects the entire spectrum of the automotive retail ecosystem through one seamless platform. The transformative platform uses cutting-edge technology, big data, machine learning, and AI to seamlessly bring together OEMs, retailers/dealers and consumers.

Positively disrupting an industry that has not seen any innovation in over 50 years, Tekion has challenged the paradigm with the first and fastest cloud-native automotive platform that includes the revolutionary Automotive Retail Cloud (ARC) for retailers, Automotive Enterprise Cloud (AEC) for manufacturers and other large automotive enterprises and Automotive Partner Cloud (APC) for technology and industry partners. Tekion connects the entire spectrum of the automotive retail ecosystem through one seamless platform. The transformative platform uses cutting-edge technology, big data, machine learning, and AI to seamlessly bring together OEMs, retailers/dealers and consumers.

Roles and Responsibilities:

• Security Integration: Embed security best practices across the software development lifecycle (SDLC), from code commit to deployment, ensuring "security by design."
• Collaboration: Work closely with Cloud Security and Product Security teams to develop and enforce security standards, policies, and frameworks.
• Infrastructure Hardening: Implement and automate security controls across AWS/Azure/GCP resources, Kubernetes clusters, containers, and other infrastructure components.
• CI/CD Security: Integrate automated security testing, static and dynamic analysis, and vulnerability scanning into CI/CD pipelines.
• Threat Detection & Incident Response: Develop and maintain monitoring/alerting for security incidents; participate in incident triage, root cause analysis, and response efforts.
• Tooling & Automation: Build and maintain automation for compliance checks, secrets management, access controls, patching, and audit logging.
• Governance: Ensure the team’s infrastructure and deployments are compliant with industry regulations and Tekion’s internal security requirements.
• Continuous Improvement: Stay current with emerging threats, vulnerabilities, and security best practices; propose and implement relevant improvements.
• Evangelism: Foster a security-first mindset within DevOps and engineering teams through knowledge sharing, documentation, and training.

What makes you relevant for this role?

• Bachelor’s degree in computer science, Engineering, or a related technical field, or equivalent practical experience.
• 8+ years of experience in DevOps, Site Reliability Engineering, or Security Engineering roles.
• Solid hands-on experience with cloud infrastructure (AWS/GCP/Azure).
• Deep understanding of secure infrastructure design, identity and access management, network security, and related best practices.
• Experience securing container platforms (Docker, Kubernetes) and modern CI/CD toolchains (e.g., Jenkin, Tekton, GitHub actions, ArgoCD).
• Proficiency in at least one scripting/programming language (Python, Go, etc.) and strong automation skills.
• Practical familiarity with vulnerability management, scanning, threat modelling, and remediation workflows.
• Strong collaboration, communication, and documentation abilities.

Why Tekion?

• Opportunity to work with some of the smartest minds to solve complex security challenges at scale.
• Impactful role in shaping and securing a global, cloud-native & AI driven platform.
• Innovative, collaborative, and fast-paced culture.

Important: Tekion will only contact candidates from an @tekion.com email address or through our applicant tracking system (no-reply@ashbyhq.com). We may also work with authorized recruiting partners from time to time. Tekion and its recruiting partners will never ask you to pay fees or send money for applications, interviews, training, or onboarding. If you receive a message that seems suspicious, please do not respond or share personal or financial information.