DevOps Engineer (Infrastructure and Security Focus)

Important: This position is open only to candidates who currently reside in one of the following US locations. You will NOT be considered if you live outside these locations:

Oregon, Washington, California, Arizona, Minnesota, Michigan, Louisiana, Texas, or Washington, D.C.

Also, you must be authorized to work in the US without employer sponsorship now or in the future. We are unable to provide visa sponsorship for this role.

About Castle Rock Associates

Castle Rock is an industry leader in developing and operating software for transportation agencies across North America and Europe. Our software supports mission-critical functions for our clients and the public, improving safety, trust, and mobility on roads and highways.

We’ve been in this industry for over 40 years, but we’ve remained a small (~30 people), focused, and highly productive team with a suite of successful products that we continue to grow and develop in close partnership with our clients.

At the heart of our business is our 24/7/365 DevOps support team, which deploys, maintains, and monitors our systems in the Amazon Web Services (AWS) cloud. We’re now investing heavily in security and compliance, working toward GovRAMP authorization, and modernizing infrastructure that has grown organically over many years.

The Opportunity

We’re hiring a hands-on DevOps Engineer to help us get our systems audit-ready for GovRAMP and rebuild pieces of our AWS environment to meet modern security and compliance standards. This is a high-impact, high-autonomy role: you’ll be architecting new infrastructure, hardening and rebuilding legacy systems, mapping our environment to NIST 800-53 / GovRAMP control families, and moving fast using modern AI-assisted development tools.

This role reports directly to our CTO and will work as part of our DevOps team to support the current systems while applying security enhancements. If you love untangling legacy AWS environments, designing infrastructure the right way the first time, and want to apply serious security rigor without getting buried in bureaucracy, this role is built for you.

Why This Role Is Great for You

• You get to build, not just maintain – you’ll architect new infrastructure and rebuild legacy systems rather than only keeping the lights on.
• Your compliance and security expertise matters – your knowledge directly shapes how we design and document our systems.
• You’ll work at the speed AI tools now enable – we want someone who builds fast using modern AI coding and infrastructure tools.
• High visibility, high trust – you’ll work directly with the CTO and Leadership team on one of the company’s top priorities this year and beyond.
• You’ll see your impact immediately – on a small team, your architecture and security decisions directly determine whether we pass our audits and how resilient our systems are.

What You’ll Do

• Design, build, and rebuild AWS infrastructure to meet security best practices and GovRAMP/NIST 800-53 control requirements.
• Lead infrastructure-as-code efforts (Terraform, CloudFormation, or similar) to make environments repeatable, auditable, and version-controlled.
• Partner with the CTO to map technical controls to NIST 800-53 / GovRAMP control families and produce supporting evidence and documentation.
• Assess existing systems for architectural, security, and compliance gaps, and design remediation plans and rebuilds where needed.
• Deploy and maintain services across Java, Node.js, and other platforms in AWS.
• Design and implement system monitoring, logging, and alerting (e.g., CloudWatch, SIEM tooling) to support security operations and audit evidence.
• Harden identity and access management, network segmentation, and encryption (at rest and in transit) across environments.
• Use AI-assisted development and infrastructure tools (e.g., Claude Code, Cursor) to accelerate delivery, while applying sound judgment to review, secure, and validate AI-generated code and configurations. We are a human-led, AI-powered company, and accountability always rests with our people.
• Build and maintain CI/CD pipelines that bake in security and compliance checks.
• Participate in an on-call rotation to support 24/7 system reliability.
• Contribute to incident response, business continuity, and disaster recovery planning and testing.

What We’re Looking For

*Must-Have Skills…