DevSecOps Engineer

About the role

We are looking for a proactive DevSecOps Engineer with at least 5 years of hands‑on experience to join a small, high‑performing team of DevOps professionals. You will be responsible for building, maintaining, and scaling secure cloud infrastructure and CI/CD pipelines while embedding security‑as‑code throughout the development lifecycle.

Key responsibilities

• Integrate automated security scanning (SAST, DAST, container scanning) into CI/CD pipelines.
• Maintain and audit cloud infrastructure compliance (SOC2, HIPAA, GDPR) using automated policies.
• Implement security best practices in Terraform/IaC to ensure consistent security‑as‑code.
• Monitor, investigate, and respond to cloud security incidents in collaboration with security and compliance teams.
• Design, deploy, and manage AWS infrastructure (EC2, RDS, OpenSearch, EKS) and oversee a large fleet of Kubernetes clusters.
• Harden Kubernetes clusters with network policies, RBAC, and pod security standards.
• Identify automation opportunities and optimize deployment and infrastructure management.
• Document processes, infrastructure decisions, and security configurations clearly.

Required profile

• 5+ years of experience in DevOps or related roles with a strong security focus.
• Proactive, collaborative mindset with excellent communication skills.
• Growth‑oriented attitude, willing to give and receive feedback.
• Advanced English proficiency.

Required skills

• AWS services (EC2, RDS, OpenSearch, EKS).
• Kubernetes cluster management and hardening.
• Terraform and Infrastructure as Code.
• CI/CD pipeline creation and automation.
• Security scanning tools (SAST, DAST, container scanning).
• Compliance frameworks (SOC2, HIPAA, GDPR).
• Incident monitoring and response.