Senior Devops Engineer

About the role

For over four decades, PAR Technology Corporation (NYSE: PAR) has been a leader in restaurant technology, empowering brands worldwide to create lasting connections with their guests. Our innovative solutions and commitment to excellence provide comprehensive software and hardware that enable seamless experiences and drive growth for over 100,000 restaurants in more than 110 countries. Embracing our "Better Together" ethos, we offer Unified Customer Experience solutions, combining point-of-sale, digital ordering, loyalty and back-office software solutions as well as industry-leading hardware and drive-thru offerings. To learn more, visit partech.com http://partech.com or connect with us on LinkedIn https://www.linkedin.com/company/partechnology/, X (formerly Twitter) https://twitter.com/par_tech, Facebook https://www.facebook.com/parpointofsale/, and Instagram https://www.instagram.com/partechnology/.

We are looking for a Senior DevOps Engineer to embed security into every stage of how PAR builds, ships, and operates software. You will sit at the intersection of platform engineering and security, owning the tooling, automation, and guardrails that let dozens of product teams move fast without compromising the trust of the brands and guests who rely on us. This is a hands-on senior role: you will design secure CI/CD and cloud infrastructure, hunt down risk before it reaches production, and raise the security bar for the entire engineering organization.

What You'll Do

- Design, build, and operate secure CI/CD pipelines with integrated SAST, DAST, SCA, secrets scanning, and container image scanning — making the secure path the easy path for product teams.

- Harden and automate cloud infrastructure (AWS and/or Azure) using infrastructure-as-code, with security policies enforced as code through tools such as OPA, Sentinel, or native policy engines.

- Own container and orchestration security across Docker and Kubernetes: image provenance, runtime protection, network policies, and admission controls.

- Implement and tune cloud security posture management, vulnerability management, and threat detection; drive findings to remediation with engineering teams.

- Build and maintain secrets management, identity, and least-privilege access patterns (IAM, workload identity, service mesh mTLS).

- Lead threat modeling and secure design reviews for new services and architectures; partner with product engineering early rather than auditing late.

- Respond to and run post-incident analysis for security events; improve detection, alerting, and runbooks after every incident.

- Design and manage cloud networking: VPC/VNet architecture, subnetting, routing, NAT, VPC peering and transit gateways, private endpoints/PrivateLink, and hybrid connectivity (site-to-site VPN, Direct Connect/ExpressRoute).

- Operate edge and traffic-layer security: load balancers (ALB/NLB, NGINX, HAProxy), API gateways, WAF, DDoS protection, CDN configuration, DNS management, and TLS certificate lifecycle/PKI automation.