Senior DevSecOps Engineer at Tana

Position Overview

• We are hiring a Senior DevSecOps Engineer to own cloud infrastructure, CI/CD pipelines and security for a commercial real estate software company. Its platform helps companies manage property leases, documents, key dates, tasks and lease accounting compliance.
• Azure is the primary cloud platform, with AWS also part of the environment. The priority is a strong DevSecOps engineer on the Microsoft stack who can work independently, identify risks proactively and learn unfamiliar tools and services.

Responsibilities

• Build and manage cloud infrastructure on Azure and AWS, defined as code using Terraform.
• Set up and maintain Azure DevOps CI/CD pipelines for building, testing and deploying the platform.
• Apply security best practices across cloud and on-premises systems, including access control, vulnerability management, patching and compliance.
• Use Microsoft Defender for Cloud, Endpoint and Identity to monitor and respond to security issues.
• Set up logging, metrics and alerting to provide visibility into production systems.
• Administer Windows and Linux servers, including patching, hardening and maintaining availability.
• Automate repetitive work using PowerShell, Bash or Python.
• As a secondary responsibility, support Microsoft 365 and Entra ID administration, including users, groups, access and MFA; support device management through Intune; and handle IT escalations when needed.

Requirements

• 5+ years of experience in DevOps or cloud engineering roles.
• Strong hands-on Azure experience, including building and operating production infrastructure and working with core services across compute, networking, identity, storage and Key Vault.
• Some hands-on AWS experience in addition to Azure. Azure is the primary platform, but AWS exposure is required.
• Infrastructure-as-code experience with Terraform or a similar tool, such as Bicep or CloudFormation.
• Experience building or maintaining CI/CD pipelines, ideally in Azure DevOps. GitHub Actions or similar experience is acceptable.
• Knowledge of cloud and DevOps security best practices, including identity and access management, secrets management, network security and vulnerability management.
• Good general working knowledge of both Windows and Linux servers, with confidence administering both.
• Scripting experience in PowerShell, Bash or Python.
• Experience with monitoring and observability, including logging, metrics and alerting, using tools such as Azure Monitor or Application Insights.
• Ability to take ownership of a problem and work independently without close supervision.
• A proactive approach to identifying and raising infrastructure or security risks before they become incidents.
• Ability to learn new tools and services, including working independently from documentation.

Nice to have

• Microsoft 365 administration, including Exchange Online, SharePoint, Teams and licensing.
• Entra ID administration, including groups, conditional access and MFA.
• Device management with Intune.
• Experience with Microsoft Defender for Cloud, Endpoint or Identity.
• Azure Landing Zones or Cloud Adoption Framework experience.
• PBX/VoIP telephony administration.
• Helpdesk or IT support experience.
• Azure, AWS or security certifications.