DevSecOps Engineer

About the Company

Overflow is a Series C, growth-stage technology company on a bold mission: to inspire the world to give. We're a vertical fintech and SaaS platform unlocking more ways to give — cash, stock, crypto, and beyond — through a beautifully designed ecosystem built for high-impact churches, nonprofits, and mission-driven institutions.

Responsibilities

• Secure, manage, and scale Overflow’s cloud environment using least-privilege IAM, VPCs, WAFs, and secret management
• Refine infrastructure provisioning using Infrastructure as Code (IaC)
• Deploy and manage observability, logging, and alerting frameworks
• Own and optimize CI/CD pipelines and integrate automated security testing (SAST, DAST, dependency scanning)
• Act as a security champion through threat modeling and architectural reviews
• Action compliance requirements for SOC 2, PCI-DSS, and data privacy regulations
• Ensure encryption of PII and sensitive financial data at rest and in transit

Requirements

• 5+ years in DevOps, Site Reliability, or Cloud Platform roles
• Deep, hands-on experience with Docker and AWS ECS Fargate
• Extensive experience building and maintaining deployment pipelines using GitHub Actions
• Practical experience maintaining SOC 2 technical controls
• Strong understanding of architectural requirements for PCI-DSS compliance

Preferred Qualifications

• Previous experience as the first DevOps or SRE hire at a high-growth startup
• Experience securing financial ledger systems, payment gateways, or blockchain/crypto infrastructure
• Experience with bug bounties, internal threat modeling, or OWASP Top 10 knowledge

Benefits

• Competitive base salary with equity eligibility
• Medical, dental, and vision coverage
• Generous paid time off and company holidays
• Paid parental leave
• 401(k) retirement plan
• Dedicated mental health and therapy stipend
• Team retreats and intentional in-person gatherings