Lead SRE / Technology Operations (DevSecOps)

Security and Controls

• Manage vulnerability remediation, penetration testing, and security findings.
• Maintain secrets, certificates, and infrastructure hardening standards.
• Support technology controls, audit requirements, and regulatory evidence.
• Oversee vendor performance, access rights, service-level agreements, and material incident reporting.

Requirements

• At least 6 years of hands-on experience in SRE, DevOps, DevSecOps, platform, or infrastructure engineering.
• At least 2 years of experience in fintech, banking, brokerage, payments, exchanges, or another regulated or audited environment.
• Strong production-level AWS or equivalent cloud experience.
• Proven production Kubernetes experience.
• Strong Terraform, Ansible, or equivalent infrastructure-as-code experience.
• Experience with IAM/PAM, privileged access, and access reviews.
• Strong incident management, root cause analysis, disaster recovery, and business continuity experience.
• Experience working with security teams, SOCs, CISOs, or managed security providers.
• Exposure to vulnerability management and penetration testing.
• Audit, regulatory controls, ISO 27001, or SOC 2 experience is highly desirable.
• Strong written and spoken English for communication with auditors and technical stakeholders.

Digital Assets and Crypto Exposure

• Digital-assets experience is highly desirable but is not mandatory.
• Relevant exposure may include wallet and custody infrastructure, hot, warm, and cold wallets, or custody platforms such as Fireblocks and BitGo.
• Relevant exposure may also include key management, signer access, withdrawal approval, multi-signature controls, blockchain nodes, RPC infrastructure, deposit and withdrawal pipelines, and KYT tools.
• Professionals from regulated fintech, banking, brokerage, or payments environments may also be considered.

Working Scope