We are looking for a Senior DevSecOps Engineer to own the infrastructure, deployment automation, and security posture of Velocity, Nelnet’s cloud-native loan servicing platform and the company’s first major enterprise system to run entirely in AWS.
Velocity is a fully serverless platform. Roughly 50 to 60 Node.js/TypeScript microservices run on AWS Lambda behind API Gateway, an event-driven backbone is built on SNS/SQS with namespace-based filtering, data lives in Aurora PostgreSQL with read-replica clusters, and infrastructure is provisioned through CloudFormation. We deliver through GitHub and GitHub Actions across four environments (Dev, QA, Train, Production), and we monitor through CloudWatch and Datadog.
We believe the full lifecycle of a cloud system, including provisioning, deployment, maintenance, and retirement, belongs in code. We believe security controls belong in the pipeline, not in a checklist at the end of it. And because Velocity operates in the financial services sector, we are held to defined vulnerability remediation commitments by our clients and to a growing set of audit and compliance obligations, including SOC 2.
This is a senior, high-autonomy role. You will be handed problems, not specifications. Much of what needs to be built here has never been built here before, and there is no one to hand you a finished requirements document. You will be expected to define the problem, propose the approach, socialize it with architecture and delivery teams, and then go build it. You will also be one of the most senior technical voices on the team, setting standards other engineers follow and raising the technical ceiling of everyone around you.
Nelnet believes in a hybrid work environment that accommodates both in-office and remote work. This model promotes a positive work-life balance and culture, enabling in-person collaboration when possible while also providing benefits associated with remote work. The standard hybrid work schedule includes 24 hours of in-office work each week, for associates that reside within 30 miles of an office. This is subject to change, based on manager discretion.
At this time, we are unable to consider external candidates that reside in these states: Alabama, California, Connecticut, Hawaii, Illinois, Maine, Massachusetts, Michigan, New Jersey, New York, Oregon, Rhode Island, Vermont, Washington.
NOTE: Internal Associates working in a remote capacity may be considered for this position.