DevSecOps Engineer
About 10x People:
At 10x People, we build cloud-based numbering software that helps telecom carriers, MVNOs, and CPaaS providers order, port, and manage phone numbers. Founded in 2013 and based in Littleton, Colorado, we serve customers across the U.S. and Canada, and our platform is part of their daily operations. We joined Banyan in September 2026, giving us a permanent home and the resources to keep growing.
The Role:
We're looking for an engineer who enjoys both building infrastructure and securing it. You'll own key parts of our AWS and Kubernetes platform while leading our day-to-day security and compliance work, with roughly half of your time on security.
It's a broad role with real ownership, suited to someone who likes variety and wants to shape how a growing company runs. You'll have a direct impact on how we build and ship.
Platform and DevOps
Kubernetes on AWS: Build, operate, and improve our Kubernetes (EKS) infrastructure on AWS.
EKS Migrations: Lead and execute workload migrations onto EKS.
CI/CD with Security Built In: Maintain and improve CI/CD pipelines, building security checks directly into them.
Automation: Automate wherever you can. If you do something manually twice, script it.
Security and Compliance
SOC 2 Program: Run our SOC 2 program in Vanta: tracking controls, closing gaps, and keeping us audit-ready.
Vulnerability Management: Own vulnerability management. Triage container CVEs from ECR scans and SAST/DAST findings, then fix them yourself or route them to the right team through GitHub.
Monitoring and Response: Monitor and respond to AWS security alerts (GuardDuty, Security Hub) and externally reported issues.
Access and Policy: Manage internal access control and maintain policies for secure development and data handling.
Design and Threat Modeling: Join design reviews and threat modeling sessions with engineering.
Security Awareness: Coordinate penetration tests, run tabletop exercises, and help keep the org security-aware.
Qualifications for success:
2+ years of experience in DevOps, platform, SRE, or security engineering.
Hands-on production experience with Kubernetes, preferred.
Solid working knowledge of AWS, including IAM, networking, and core services.
Experience planning and executing infrastructure migrations.
Proficiency in scripting (Python, Bash, or similar) and Git-based workflows.
Ability to work independently, prioritize well, and figure things out without a playbook.
Based in or able to commute to Littleton, CO, with in-office attendance on Tuesdays. Otherwise, will consider remote locations in the U.S.
Nice to have:
Experience supporting a SOC 2 or ISO 27001 audit, or using Vanta or a similar compliance platform.
Familiarity with AWS security services such as GuardDuty, Security Hub, CloudTrail, and SCPs.
Infrastructure as code experience (Terraform, CDK, or similar).
Experience with SAST/DAST tools or GitHub Advanced Security.
Relevant certifications (CKA, AWS Security Specialty, etc.).
Compensation & Posting Statement:
The expected base salary for this position is: $80,000 - $120,000 USD. Salary is based on a number of factors including market conditions, location and may vary depending on job-related skills and experience.
Benefits include fully company-paid medical for employees, a 401(k) with up to 4% company match, company-paid life and disability coverage, a $1,200 annual wellness benefit, flexible time off, paid holidays, a paid winter break, and a monthly internet stipend.