---
title: 'DevSecOps Engineer at A-LIGN External'
canonical: 'https://feeny.ai/job/devsecops-engineer-a-lign-external-panama-k6jqx30tx67b'
type: 'job'
last_seen: '2026-10-12'
---

# DevSecOps Engineer at A-LIGN External

- **Company:** A-LIGN External
- **Location:** Panama
- **Work type:** remote
- **Posted:** 2026-10-02
- **Last confirmed live:** 2026-10-12
- **Apply:** https://job-boards.greenhouse.io/align/jobs/8859924002

## Job description

## About the Role

The DevSecOps Engineer works to execute security engineering activities across A-LIGN's cloud infrastructure, CI/CD pipelines, and production applications. In this role, you will be responsible for implementing and continuously validating security controls, delivering infrastructure and application improvements, and supporting continuous audit readiness. As the DevSecOps Engineer, you will provide exceptional technical and security strategies to help support the continued growth of our fast-paced company. A-LIGN will depend on you as the DevSecOps Engineer to support management, translate security and compliance requirements into practical engineering solutions, and automate security and audit evidence workflows.

Reports to

Principal Security Engineer

Pay Classification

Full-Time

## Responsibilities

- Design, implement, and continuously validate security controls across cloud infrastructure, CI/CD pipelines, and production applications
- Author and maintain infrastructure as code using Terraform or similar tools across quality assurance, staging, and production environments
- Deliver production code that addresses security requirements, including authentication, single sign-on, authorization, session security, and vulnerability remediation
- Design and administer identity and access management solutions, including OAuth 2.0, OpenID Connect, SAML, identity providers, authorization models, and account lifecycle automation
- Manage vulnerability remediation from triage through closure across static application security testing, dynamic application security testing, dependency scanning, and container scanning tools
- Remediate penetration testing findings in code and infrastructure and prepare evidence-based technical responses when findings do not apply
- Translate FedRAMP, NIST 800-53, and other framework requirements into deployed technical controls and repeatable audit evidence
- Maintain cryptographic compliance through validated module configuration, certificate management, and TLS and DNS posture verification
- Develop automation for security operations and evidence collection, including scripts, reports, API integrations, and verified artificial intelligence workflows
- Maintain security architecture documentation, including authorization boundaries, network architecture, and data flow diagrams
- Perform security impact analysis for production changes and maintain pre-production security deployment checklists
- Participate in threat modeling, risk assessments, continuous monitoring, software bill of materials generation, software supply chain security, logging coverage, and user access reviews

## Minimum Qualifications

## EDUCATION

- Bachelor's degree in information systems, cybersecurity, computer science, engineering, or a related field, or an equivalent combination of education and experience

## EXPERIENCE

- At least 4 years of combined experience in DevSecOps, security engineering, cloud engineering, or software engineering
- Experience developing production software in Go, Python, TypeScript, or a comparable modern programming language
- Hands-on experience with GCP, AWS, or Azure, including identity and access management, containers or serverless services, build pipelines, secrets management, and log-based troubleshooting
- Experience using Terraform or a similar infrastructure as code platform in production environments
- Working knowledge of OAuth 2.0, OpenID Connect, SAML, JSON Web Tokens, and identity provider administration
- Experience managing vulnerabilities and responding to penetration testing findings, including code-level remediation
- Experience with scripting and automation using Python, shell, SQL, or similar tools
- Experience working in regulated or compliance-driven environments preferred
- Familiarity with FedRAMP, NIST 800-53, SOC 2, ISO 27001, or similar security and compliance frameworks
- Familiarity with FIPS 140-2 or FIPS 140-3 requirements preferred
- Experience with fine-grained authorization models, governance, risk, and compliance platforms, or compliance as code tooling preferred
- Experience operating in a private equity-backed or high-growth environment preferred

## CERTIFICATIONS

- Preferred: CISSP, CCSP, GCP Professional Cloud Security Engineer, AWS Certified Security - Specialty, or a similar cloud security certification

## SKILLS

- Ability to translate security and compliance requirements into practical engineering changes and implement them directly
- Ability to troubleshoot across content delivery networks, web application firewalls, load balancers, runtime platforms, application code, and logs
- Excellent written and verbal communication skills, including the ability to prepare technical documentation, auditor responses, and repeatable runbooks
- Highly organized with the ability to manage release, remediation, and audit deadlines across multiple concurrent workstreams
- Self-directed with strong follow-through in a fast-paced, deadline-driven environment
- Ability to work individually as well as collaboratively across technical and business teams
- Demonstrated experience using agentic artificial intelligence development tools to support coding, integrations, workflow automation, and output verification

## Benefits

- Employer Paid Life & Health Insurance
- Competitive Bonus Structure
- Home Office Reimbursement
- Technology Allowance
- Certification Reimbursement
- BeneficiaT Discount Loyalty Program
- Personalized Career Coaching
- Generous Paid Time Off
- Paid Office Closure December 25-January 1
- Summer Hours

## About A-LIGN

A-LIGN is the leading provider of high-quality, efficient cybersecurity compliance programs. Combining experienced auditors and audit management technology, A-LIGN provides the widest breadth and depth of services including SOC 2, ISO 27001, HITRUST, FedRAMP, and PCI. A-LIGN is the number one issuer of SOC 2 and HITRUST and a top three FedRAMP assessor. To learn more, visit a-lign.com.

Come Work for A-LIGN!

Apply online today at A-LIGN.com and learn about life at A-LIGN by following us on [LinkedIn](https://www.linkedin.com/company/a-lign/posts/?feedView=all).

A-LIGN is an Equal Opportunity Employer. Minorities, women, disabled, and veterans encouraged to apply!

## About A-LIGN External

## Company Overview
- **One-liner**: A-LIGN is a technology-enabled security and compliance partner that helps organizations navigate cybersecurity risks through auditing, certification, and managed compliance services.
- **Entity Type**: Private (funding stage not disclosed)
- **Headquarters**: Tampa, Florida, United States (with additional offices in London, Galway, Panama City, Sofia, and Gurugram)
- **Founded**: 2009
- **Founders**: Not publicly available

## Core Business
- **Primary industry/industries**: Cybersecurity, Compliance, Audit, Risk Management
- **Target customers**: B2B – startups to global enterprises; heavily focused on regulated industries (tech, healthcare, government, finance)
- **Mission or purpose statement**: “Help companies like yours navigate the complexities of cybersecurity and compliance by offering customized solutions that align specifically with each organization's unique goals and objectives.” [a-lign.com](https://www.a-lign.com/about)

## Products & Services
- **SOC 1 and SOC 2 Audits**: Licensed auditor for System and Organization Controls reports.
- **ISO 27001 / 27701 / 22301 Certifications**: Accredited certification body for information security, privacy, and business continuity.
- **HITRUST CSF Assessment**: HITRUST CSF Assessor Firm.
- **FedRAMP**: Accredited 3PAO for cloud service provider authorizations.
- **CMMC (Cybersecurity Maturity Model Certification)**: C3PAO for defense supply chain compliance.
- **PCI DSS**: Qualified Security Assessor Company.
- **A-SCEND Platform**: Proprietary compliance management platform for evidence collection, audit tracking, and reporting.
- **Penetration Testing & Ransomware Preparedness**: Additional security testing services.

## Market Standing
- **Valuation/Market Cap**: Not disclosed
- **Key Metric**: Total funding not disclosed; key operational metrics include 6,400+ clients globally, 36,000+ audits completed, and 400+ auditors [a-lign.com](https://www.a-lign.com/).
- **Notable Investors/Partners**: Not publicly listed; partners with leading GRC automation tools (e.g., compliance automation providers) [a-lign.com](https://www.a-lign.com/).
- **Growth Signals**: Offices across 6 countries; recognized as #1 Top SOC 2 report issuer and Top 3 FedRAMP assessor; 96% customer satisfaction rating; expanded services to include CMMC and FedRAMP.

## Competitive Advantages
- **Single-provider model**: Offers the widest breadth of compliance frameworks (SOC, ISO, HITRUST, FedRAMP, PCI, CMMC) under one roof, reducing vendor fragmentation.
- **Proprietary technology**: A-SCEND platform streamlines audit evidence collection and communication.
- **Scale and reputation**: Largest issuer of SOC 2 and HITRUST reports; top FedRAMP assessor; trusted by thousands of organizations.
- **Quality focus**: 24-hour response time and high customer satisfaction (96%).

## Strategic Focus
- **Current priorities**: Continuing to expand global presence, deepening FedRAMP and CMMC capabilities, and enhancing the A-SCEND platform to further automate compliance workflows.
- **Direction for growth**: Pursuing new markets (government, healthcare, defense) and scaling the auditor workforce to meet demand.

## Why Work Here
- **Culture**: Emphasizes human connection, quality, integrity, and innovation. Core values: “Be all in”, “Commit to quality”, “Do the right thing”, “Innovate constantly”. Annual company event called CLIMB.
- **Workplace flexibility**: Multiple global locations; home office reimbursement suggests hybrid/remote options are available for some roles.
- **Benefits**: Healthcare/dental/vision, employer-paid life and disability insurance, 401(k) with match, generous PTO (including paid office closure Dec 25–Jan 1), summer hours, certification reimbursement, personalized career coaching, and access to A-LIGN University for continuous learning.
- **Diversity & Inclusion**: Prioritizes DEI; encourages individuals from all backgrounds to apply.
- **Career growth**: Opportunities to move between cybersecurity, audit, and operations tracks; sponsorship for certifications like CISA, CISSP, CEH.

## Sources
1. [a-lign.com/about](https://www.a-lign.com/about)
2. [a-lign.com/](https://www.a-lign.com/)
3. [a-lign.com/careers](https://www.a-lign.com/careers)
4. [linkedin.com/company/a-lign](https://www.linkedin.com/company/a-lign)
5. [boards.greenhouse.io/align](https://boards.greenhouse.io/align)

## Other roles at A-LIGN External

- [Business Development Representative](https://feeny.ai/job/business-development-representative-a-lign-external-tampa-g0c1mvjzcya2) — Tampa, United States
- [Business Development Manager](https://feeny.ai/job/business-development-manager-a-lign-external-tampa-c5tkpyyp4ntk) — Tampa, United States
- [Business Development Manager](https://feeny.ai/job/business-development-manager-a-lign-external-london-wmevmb76awgk) — London, United Kingdom
- [Senior Sales Enablement Specialist](https://feeny.ai/job/senior-sales-enablement-specialist-a-lign-external-united-states-a1ez4zwp21ab) — United States
- [UK Business Development Representative](https://feeny.ai/job/uk-business-development-representative-a-lign-external-london-vhn82vng01x0) — London, United Kingdom
- [Junior Legal Counsel](https://feeny.ai/job/junior-legal-counsel-a-lign-external-sofia-a6pfbr020v1z) — Sofia, Bulgaria
- [Senior GRC Engineer](https://feeny.ai/job/senior-grc-engineer-a-lign-external-panama-city-np9mzn0cje3y) — Panama City, Panama
- [Account Executive, Expansion - Enterprise](https://feeny.ai/job/account-executive-expansion-enterprise-a-lign-external-united-states-d9kq1wj5mmhz) — United States
- [Panama Director of Operations](https://feeny.ai/job/panama-director-of-operations-a-lign-external-panama-city-9credhhr56az) — Panama City, Panama
- [Talent Acquisition Professional](https://feeny.ai/job/talent-acquisition-professional-a-lign-external-sofia-q29jfdsm2jr4) — Sofia, Bulgaria