Staff Engineer, DevOps - DevsecOps

Skills this role screens for

Also

ABOUT TEKION

Positively disrupting an industry that has not seen any innovation in over 50 years, Tekion has challenged the paradigm with the first and fastest cloud-native automotive platform that includes the revolutionary Automotive Retail Cloud (ARC) for retailers, Automotive Enterprise Cloud (AEC) for manufacturers and other large automotive enterprises and Automotive Partner Cloud (APC) for technology and industry partners. Tekion connects the entire spectrum of the automotive retail ecosystem through one seamless platform. The transformative platform uses cutting-edge technology, big data, machine learning, and AI to seamlessly bring together OEMs, retailers/dealers and consumers. With its highly configurable integration and greater customer engagement capabilities, Tekion is enabling the best automotive retail experiences ever. Tekion employs close to 3,000 people across North America, Asia and Europe.

Positively disrupting an industry that has not seen any innovation in over 50 years, Tekion has challenged the paradigm with the first and fastest cloud-native automotive platform that includes the revolutionary Automotive Retail Cloud (ARC) for retailers, Automotive Enterprise Cloud (AEC) for manufacturers and other large automotive enterprises and Automotive Partner Cloud (APC) for technology and industry partners. Tekion connects the entire spectrum of the automotive retail ecosystem through one seamless platform. The transformative platform uses cutting-edge technology, big data, machine learning, and AI to seamlessly bring together OEMs, retailers/dealers and consumers. With its highly configurable integration and greater customer engagement capabilities, Tekion is enabling the best automotive retail experiences ever.

The work

Roles and Responsibilities

What makes you relevant for this role?

• Security Integration: Embed security best practices across the software development lifecycle (SDLC), from code commit to deployment, ensuring "security by design."
• Collaboration: Work closely with Cloud Security and Product Security teams to develop and enforce security standards, policies, and frameworks.
• Infrastructure Hardening: Implement and automate security controls across AWS/Azure/GCP resources, Kubernetes clusters, containers, and other infrastructure components.
• CI/CD Security: Integrate automated security testing, static and dynamic analysis, and vulnerability scanning into CI/CD pipelines.
• Threat Detection & Incident Response: Develop and maintain monitoring/alerting for security incidents; participate in incident triage, root cause analysis, and response efforts.
• Tooling & Automation: Build and maintain automation for compliance checks, secrets management, access controls, patching, and audit logging.
• Governance: Ensure the team’s infrastructure and deployments are compliant with industry regulations and Tekion’s internal security requirements.
• Continuous Improvement: Stay current with emerging threats, vulnerabilities, and security best practices; propose and implement relevant improvements.
• Evangelism: Foster a security-first mindset within DevOps and engineering teams through knowledge sharing, documentation, and training.
• Bachelor’s degree in computer science, Engineering, or a related technical field, or equivalent practical experience.
• 8+ years of experience in DevOps, Site Reliability Engineering, or Security Engineering roles.
• Solid hands-on experience with cloud infrastructure (AWS/GCP/Azure).
• Deep understanding of secure infrastructure design, identity and access management, network security, and related best practices.
• Experience securing container platforms (Docker, Kubernetes) and modern CI/CD toolchains (e.g., Jenkin, Tekton, GitHub actions, ArgoCD).
• Proficiency in at least one scripting/programming language (Python, Go, etc.) and strong automation skills.
• Practical familiarity with vulnerability management, scanning, threat modelling, and remediation w