Senior DevSecOps Engineer

ClassWallet, a leading financial technology company in the United States, is seeking to hire a Senior DevSecOps Engineer to join our team.

ClassWallet is a financial technology company serving agencies delegated responsibility to manage public funds. Agencies use ClassWallet to get public funds to the right people, and ensure the funds are used for the right purpose. ClassWallet’s suite of products and services empowers agency administrators to dramatically increase efficiency of funds distribution and spend compliance, reduce programmatic costs, maximize the full potential impact of the program, and satisfy the needs and expectations of policymakers, constituents and public reporting. ClassWallet has processed over $3.5 Billion to date and serves public agencies across 33 states.

The Company has developed an industry-defining digital wallet solution which has gained rapid traction among state and local agencies and school districts across America. ClassWallet ranks as the 61st fastest growing software company on the prestigious Inc. 5000 list of fastest-growing private companies and the 21st fastest growing financial technology company on the Deloitte Technology Fast 500 in 2023.

While the Company delivers immense business value, the social impact of ClassWallet is a fabric that runs through its mission and corporate culture. As a result of ClassWallet’s innovation, public programs run with exponentially more efficiency and the impact and breadth of the programs for the individuals they serve is dramatically higher. This mission compliments the Company mission-based culture with focus on gratitude and work-life balance.

About the Role

At ClassWallet, we are redefining how public funds reach the people who need them. We are seeking a Senior DevSecOps Engineer to serve as the primary architect of our security posture. This is a role for a technical leader who views security as a foundational structural element, not an automated afterthought.

Reporting to the Director of Architecture, you will own the critical intersection of security and compliance, driving the continuous hardening and evolution of our systems at every layer. Your work will ensure that our platform remains a fortress, maintaining the highest levels of trust with our government partners. You will work as a high-impact peer to our DevOps and Engineering teams and collaborate closely with our CISO to align our overarching compliance efforts with deep, architectural implementation.

Requirements

The ideal candidate is a security veteran who thrives in high-stakes environments and possesses a deep "defender" mindset.

• Experience: Minimum of 10 years of experience securing Cloud systems (AWS), specifically within or very near government-level security environments (FedRAMP/GovRAMP/DoD).
• Compliance Mastery: Deep, hands-on expertise in SOC2 Type 2 compliance. Familiarity with GovRAMP and FedRAMP frameworks is essential, as you will be responsible for translating these high-level requirements into technical reality.
• Monitoring & Incident Response: Expertise in implementing and managing SIEM (Security Information and Event Management) and SOAR platforms (e.g., Splunk, Datadog Security, AlienVault, or AWS Security Hub). You should be adept at configuring complex alerting, log aggregation, and real-time threat detection to ensure constant visibility.
• Technical Stack:
• Cloud: Expert-level proficiency in hardening AWS environments (IAM, VPC, GuardDuty, KMS, Security Hub, and AWS Config).
• Application Security: Deep understanding of securing Node-based systems and modern web applications.
• Data Security: Extensive experience in database security, encryption at rest/transit, and data masking.
• Infrastructure: Deep knowledge of securing CI/CD pipelines and automating security gates within the development lifecycle.
• Documentation & Process: Proven ability to create and maintain stringent, audit-ready documentation. You don't just secure the system; you prove it through impeccable record-keeping and process design.
• Security Testing: Experience managing and remediating findings from external penetration tests and automated vulnerability scanning (SAST/DAST).

• Collaboration: Exceptional communication skills, with the ability to influence DevOps and Engineering teams to adopt a "Security-First" culture.

Strategic Goals

Your success in this role will be defined by three key pillars:

1. System Hardening & Extension: Move beyond standard configurations to implement a true "Zero Trust" architecture. You will harden our infrastructure baselines and extend our security capabilities to anticipate emerging threats before they manifest, ensuring our systems are robust from the ground up.
2. Compliance Integration: Transform compliance from a yearly audit into a continuous, architectural process. You will align our SOC2, GovRAMP, and FedRAMP efforts so that our security posture is a lived reality, fully integrated into our deployment pipelines and daily operations.
3. Trust as a Competitive Advantage: Position ClassWallet’s security as a market differentiator. By maintaining an impeccable security environment, you enable the business to confidently pursue the most sensitive government contracts, knowing our technology is the gold standard for fund management.

Benefits

ClassWallet is a positive, family-oriented team environment. Our focus is on encouragement, positive reinforcement, and gratitude. We work hard and are highly motivated to win but with a healthy perspective on life.

We offer an excellent salary and benefits commensurate with experience.

ClassWallet.com is proud to be an Equal Opportunity Employer. Applicants are considered for all positions without regard to race, color, religion, sex, national origin, age, disability, sexual orientation, marital or veteran status.