Senior DevOps Security Lead

The Role: Senior DevOps / Security Lead

Who You Are:  

You are a proactive leader, always looking for opportunities for improvement. You love to build solid foundations and ensure uptime and reliability, as well as protection from vulnerability, are well managed. You are comfortable to lead projects and take ownership of systems and processes. You’re ready to take on AWS cloud infrastructure, CI/CD, release engineering, and observability, and own the information security program and the SOC 2 compliance effort. In this seat, you’ll concentrate on elevated infrastructure access with security oversight, you’ll operate under explicit compensating controls that preserve segregation of duties and have the opportunity to lead in maturing our DevOps and security posture.

Who We Are: 

Operating for over 30 years, LiftNet is a pioneer and leader in vertical transportation performance monitoring and management. We are the unbiased Source of Truth in vertical transportation management. Our platform connects, controls, and monitors elevators, escalators, and moving walks for building operators across enterprise, transit, healthcare, and government environments. Accessible from any device, our customers can access real-time analytics and reporting on their vertical transportation portfolio, regardless of geographic location or distribution. 

We are scaling the platform, the team, and the enterprise customer base as an independent division within Kings III of America. Real-World Experience. Futureproof Innovation.

What You’ll Do: 

• Own CI/CD pipelines and release engineering across all environments (Dev/QA/Staging/Production/Demo/Multi-Region).
• Own cloud infrastructure-as-code (reliability, scaling, and cost optimization on AWS).
• Own the observability/monitoring stack, on-call alerting, and incident response.
• Implement and operate change management for production deployments.
• Own the information security program, policies, and the SOC 2 control set and evidence.
• Govern identity and access management (IAM) - provisioning standards, least privilege, and MFA enforcement.
• Run quarterly access reviews/recertification across all in-scope systems.
• Own vendor/third-party security risk assessment and review.
• Manage the SOC 2 auditor relationship and readiness milestones.
• Manage AWS Cognito identity integration, backups, and disaster-recovery procedures.
• Monitor platform uptime percentage (target 99.9%).
• Own deployment frequency and change-failure rate; mean time to recovery (MTTR).
• Manage infrastructure cost as a percentage of ARR.
• SOC 2 Type 1 readiness milestones delivered on schedule.
• Quarterly access reviews completed on time, exceptions remediated.
• Mean time to revoke access on offboarding (target = 1 business day).
• Security incident count and time-to-contain.

What You’ll Bring: 

• Bachelor's degree or equivalent experience; AWS or Security credentials a plus.
• 8+ years across DevOps/SRE/platform engineering AND information security, with senior-level AWS depth.
• Direct ownership of a SOC 2 (or ISO 27001) program, including auditor relationship and evidence.
• Strong infrastructure-as-code (Terraform / CloudFormation), CI/CD, and containerization experience.
• Strong IAM and cloud-security depth - identity federation, access governance, and hardening.
• Hands-on observability and production incident response.
• Deep, hands-on Linux expertise - operating, debugging, and hardening Linux hosts from the command line (systemd, networking, bash scripting, log analysis); the edge devices (Raspberry Pi) and the AWS EC2 services run on Linux.
• Working Rust proficiency - able to build, package, deploy, and troubleshoot the Rust backend / VTS (including ARM / edge cross-compilation) and to own its CI/CD and release pipelines.
• Pragmatic for a small, fast-moving company - risk-based, automation-first, low ego; communicates bottom-line-first.

What We Do:

Our mission is simple – We provide telemetry and control services to help organizations manage their vertical transportation and guest experience. 

Our Core Values are even simpler:

1. Honesty & Integrity

2. Service to the customer above all else

3. Do what is right

4. Good enough is not good enough: pursue excellence

5. Encourage individual initiative and growth

By living and breathing our mission and Core Values every day in everything we do, Kings III and LiftNet are creating opportunities for individuals and reducing risk, liabilities, and costs for businesses every day. 

LiftNet provides a powerful layer of intelligence with its highly configurable, OEM-agnostic elevator performance monitoring platform. Designed for multi-site, multi-manufacturer portfolios, LiftNet provides centralized, cloud-based visibility into elevator and escalator activity. Both Kings III’s cutting edge emergency response and LiftNet’s visibility into elevator performance and analytics create a set of solutions that change the game for those properties managing diverse elevator portfolios across locations, brands and service providers. Two Brands, One Unified Vision.

What’s in it For You:

• Medical insurance with 1 HSA and 2 PPO plan options
• Flex Spending Account (FSA)/Dependent Care FSA
• Dental, vision, life, short- and long-term disability insurance 
• Critical illness and hospital indemnity plans
• 401k with company contribution
• Employee Assistance Program (EAP)
• Company paid telemedicine 24/7 access
• Wellness Program
• Employee discount program 
• 8 paid holidays, plus 1 floating holiday
• 15 days of PTO accrued in year 1 
• Generous referral bonus program
• Work life balance (a must!)
• Team building, attendance at our annual kickoff each January, and other fun events
• Relaxed professional dress code

Kings III is an Equal Opportunity Employer and committed to maintaining a drug-free workplace. We do not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity, status as a veteran, and basis of disability or any other federal, state, or local protected class.