Senior Software Engineer, DevOps - Moveworks (DevSecOps)

What you do in this role:

• Responsible for vulnerability management and security automation across the Moveworks AI cloud infrastructure and developer platform

• Closely work with platform, machine learning, search, data, and frontend teams to understand their security and infrastructure needs, and execute on DevSecOps roadmap initiatives

• Triage and drive remediation of findings from SAST, dependency, and container vulnerability scans across multi-cloud infrastructure, including AWS and Azure environments

• Implement and tune policy-as-code guardrails for Kubernetes and infrastructure-as-code, closing gaps identified through audits and scans

• Support secrets management operations, identity federation (IRSA on AWS, Managed Identity/Workload Identity on Azure), and least-privilege access patterns across the environment

• Build and manage CI/CD pipeline security controls (artifact signing, build provenance, dependency pinning) as part of the broader infrastructure-as-code and automation stack

• Support replatformization efforts extending infrastructure and security controls to Azure and other hyperscaler environments, including AKS cluster security posture

• Work closely with the security team on compliance automation, evidence collection, and audit readiness as ServiceNow's controls are adopted

Department: Engineering, Infrastructure and Operations
Function: Engineering
Experience Level: Not Applicable