DevSecOps Engineer

About the role:

The DevSecOps Engineer on the Duro Design team builds and operates the infrastructure platform that enables hardware engineers to ship with confidence every day. You’ll own the environments, pipelines, clusters, and databases that power our modern stack—ensuring everything is scalable, secure, and reliable. This role partners closely with engineering, security, and product teammates in a fast-moving, highly autonomous environment.

We’re looking for engineers who think in systems, embrace automation, and leverage modern AI-powered workflows to deliver resilient, production-grade infrastructure. This is a hybrid role based in Los Angeles, CA (3 days per week in office).

A day in the life of our DevSecOps Engineer:

Environment Ownership: Provision and manage multi-tenant and dedicated customer environments on AWS using DuploCloud, ensuring isolation, scalability, and reliability.

CI/CD Engineering: Design, optimize, and maintain GitHub Actions pipelines to enable fast, reliable daily deployments with tight feedback loops.

Kubernetes Operations: Deploy, scale, and troubleshoot production Kubernetes clusters, managing autoscaling policies, resource allocation, and health monitoring.

Database Reliability: Own PostgreSQL operations including provisioning, migrations, backups, replication, performance tuning, and disaster recovery strategies.

Infrastructure as Code: Build and maintain reproducible, version-controlled infrastructure using Terraform, Docker, and Kubernetes manifests.

Security Implementation: Partner with SecOps and CISO leadership to implement encryption policies, IAM configurations, VPC segmentation, logging, monitoring, and compliance-driven infrastructure controls across AWS and GovCloud.

Observability & Monitoring: Establish dashboards, alerts, and runbooks to maintain high availability and reduce incident frequency and recovery time.

AI-Driven Infrastructure Engineering: Leverage AI-augmented workflows to generate infrastructure modules, refine deployment scripts, and accelerate operational improvements while maintaining rigorous validation standards.

Continuous Improvement: Evaluate and integrate new tooling, improve provisioning strategies, and evolve infrastructure to support scale, compliance, and long-term system resilience.