Staff Security DevOps Engineer

About the Role

Fivetran is seeking a Staff Security DevOps Engineer to bolster and improve the robustness and security of the Fivetran Platform. This individual contributor (IC) role is hands-on and execution-focused, requiring deep expertise in container security, Kubernetes infrastructure, secure DevOps practices, and Java application deployment. You will work closely with engineering teams to build, optimize, and secure our development and deployment pipelines, automate infrastructure processes, and ensure robust, secure, and scalable systems.

This is a full-time, hybrid position based out of our Oakland, CA office. Our hybrid work model offers a blend of remote flexibility and in-person collaboration, including two days in the office each week to connect and build as a team.

Technologies You’ll Use

Scripting Languages(Python, Go, Bash), Java, IaC(Terraform), Github, Docker, Kubernetes, Cloud Platform(AWS, GCP & Azure), Build Tools(Maven, Buildkite, NPM), Container Technology (Docker, Kubernetes).

What You'll Do

• 
  

  Build, optimize, and maintain secure and efficient Docker images, with a strong focus on Java-based applications.



• 
  

  Debug, tune, and secure Java applications across development and production environments, partnering with developers to optimize runtime performance and minimize risk.



• 
  

  Develop and maintain automation scripts and infrastructure-as-code (IaC) configurations to streamline and secure Kubernetes deployments.



• 
  

  Configure, run, and debug Kubernetes clusters across multiple cloud service providers, proactively identifying performance and security improvements.



• 
  

  Collaborate with engineering teams to build scalable, reliable, and secure CI/CD pipelines, integrating automated testing, scanning, and monitoring throughout the development lifecycle.



• 
  

  Perform advanced networking configuration and troubleshooting across cloud environments, implementing least-privilege access and network segmentation policies.



• 
  

  Work directly with developers and infrastructure teams to integrate secure deployment practices and remediate risks in build pipelines and runtime environments.



• 
  

  Contribute to vulnerability and misconfiguration detection in container images, Java application dependencies, and infrastructure components, automating detection and response workflows.



• 
  

  Collaborate with infrastructure and engineering teams to implement consistent security controls, monitoring, and alerting across Fivetran Platform.



• 
  

  Contribute to broader security initiatives, including threat and risk assessments, architecture reviews, incident response, compliance support, and internal tooling improvements.



• 
  

  Stay up to date with container security, Kubernetes advancements, Container trends, and Java application security, applying knowledge to improve operational efficiency and security posture.
  

Skills We're Looking For

• 
  

  Deep expertise in Docker image creation, optimization, and vulnerability mitigation, particularly for Java applications.



• 
  

  Experienced in working across all three major cloud providers—AWS, GCP, and Azure—with a deep understanding of their respective services, security models, and deployment patterns.



• 
  

  Extensive experience with Kubernetes: deploying, running, debugging, securing, and performance tuning in production environments.



• 
  

  Senior-level experience with Java codebases: building, running, profiling, and optimizing Java applications in secure environments.



• 
  

  Strong understanding of cloud-native networking, ingress controllers, service meshes, and firewall configurations.



• 
  

  Experience with IaC tools such as Terraform, Helm, or Ansible for managing infrastructure at scale.



• 
  

  Proficiency in scripting or programming languages (e.g., Bash, Python, Go) to automate processes and integrate tools.



• 
  

  Familiarity with Security tooling for CI/CD security, container scanning, dependency analysis, and infrastructure compliance.



• 
  

  Excellent problem-solving and troubleshooting skills, with the ability to work independently in fast-paced environments.



• 
  

  Strong communication skills with the ability to effectively collaborate across engineering, infrastructure, and security teams.



• 
  

  Demonstrates strong curiosity, a sense of urgency, and a hands-on approach to diving deep into complex technical problems to drive timely and effective solutions.

  #LI-HYBRID #LI-AM1