Senior DevSecOps Engineer

Annual Compensation: $170,000 - $200,000

Position Type: Full-Time, Remote

About VIP

Vermont Information Processing (VIP) is the leading technology provider to the beverage industry, delivering route accounting, warehouse, delivery, sales, and business management platforms trusted by distributors, bottlers, and more than 1,600 suppliers for over 50 years.

Backed by Warburg Pincus, VIP is investing heavily in security as a first-class discipline across a growing family of companies. This is an opportunity to join at a pivotal moment, with executive sponsorship, a funded roadmap, and visible impact at the board level.

About the Role

VIP is seeking a Senior DevSecOps Engineer to own the security of how we build and run software, secure our release pipeline, and strengthen our cloud environments.

Today, many of the foundational components are already in place. SonarQube and CAST are deployed, CrowdStrike Cloud Security Posture Management (CSPM) is operational, and a comprehensive cloud security framework has been established. The opportunity is to operationalize these investments, embed security into engineering workflows, and make secure development and cloud operations the default path across the organization.

This role works closely with engineering, infrastructure, cloud, and security teams while providing guidance and mentorship to a junior Cloud Security Engineer located in India. The position has strong executive sponsorship and clear organizational support, reflecting VIP's commitment to maturing its security program.

What You'll Do

• Build and enforce secure-by-default software development and release processes across engineering teams.
• Implement and optimize code security controls, including Static Application Security Testing (SAST), Software Composition Analysis (SCA), Dynamic Application Security Testing (DAST), and secrets scanning within CI/CD pipelines.
• Operationalize VIP's cloud security framework across AWS environments and acquired business units.
• Manage and mature CrowdStrike Cloud Security Posture Management (CSPM) capabilities, including misconfiguration remediation and governance workflows.
• Centralize and strengthen cloud identity and access management through Okta integration and least-privilege access controls.
• Establish security standards for resource ownership, classification, and tagging across cloud environments.
• Implement and manage secrets management solutions with automated rotation and secure storage practices.
• Support data protection initiatives, including encryption validation and data loss prevention controls.
• Partner with infrastructure and operations teams to enhance resilience strategies, including immutable backup configurations and recovery planning.
• Create scalable security patterns, standards, and documentation that enable engineering teams to move quickly while maintaining security requirements.
• Mentor and support junior security team members while helping extend security programs across newly acquired business units.

What You'll Bring

• 5+ years of experience across DevOps, DevSecOps, platform engineering, cloud security, or security engineering roles.
• Hands-on ownership of CI/CD platforms such as Jenkins, Bitbucket, Git-based pipelines, GitHub Actions, GitLab CI/CD, or similar technologies.
• Experience implementing and supporting SAST, DAST, SCA, secrets management, and secure software delivery practices.
• Strong AWS security expertise, including IAM, Organizations, networking, KMS, logging, monitoring, and cloud security posture management.
• Experience with Infrastructure as Code technologies such as Terraform or CloudFormation.
• Proficiency with scripting and automation using Python or similar languages.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent communication and collaboration skills, including experience working with distributed teams across multiple time zones.
• Ability to influence engineering and infrastructure teams while balancing security, usability, and business needs.

Nice to Have

• Experience supporting Azure environments.
• Experience implementing Okta federation and identity solutions within AWS.
• Experience with Rubrik or similar enterprise backup and recovery platforms.
• Experience securing containerized workloads and modern cloud-native environments.
• AWS Security Specialty, CCSP, GIAC Cloud Security, Kubernetes Security Specialist (CKS), or similar security certifications.

Benefits Include

• Health Insurance
• Vision and Dental Expense Reimbursement
• 401(k) Match & Employer Contributions
• Life and Disability Insurance
• Health Savings and Flexible Spending Accounts
• Paid Parental Leave
• Discounted Gym Memberships
• Combined Time Off and Floating Holidays
• Flex and Remote Work Schedules
• On-site Child Care Center (VT)
• On-site Fitness Center (VT)
• On-site Health Clinic (VT)

Legal & Compliance

Equal Employment Opportunity

Vermont Information Processing is an Equal Opportunity Employer. VIP is committed to providing a workplace free of discrimination and harassment. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, pregnancy, veteran or military status, or any other characteristic protected by applicable federal, state, or local law. Employment decisions are based on legitimate, job-related factors.

Pay Equity & Transparency

VIP is committed to fair, equitable, and transparent pay. The compensation listed above reflects the anticipated pay for this role. Actual compensation will depend on job-related factors such as experience, skills, qualifications, and work location, and may be adjusted to comply with applicable state and local pay-transparency laws. VIP does not base compensation decisions on any legally protected characteristics and reviews its pay practices to support pay equity across the organization.

Reasonable Accommodation

VIP provides reasonable accommodations to qualified individuals with disabilities throughout the application and employment process. If you need an accommodation to apply for or participate in an interview, please contact [email protected].

Work Authorization

Applicants must be legally authorized to work in the location of the position.