DevSecOps Engineer

About the Opportunity

DevSecOps Engineer specializes in designing and implementing secure infrastructure architecture within our multi-cloud environment. This role focuses on building security-first infrastructure solutions, threat detection systems, and compliance frameworks across AWS and Alibaba Cloud platforms.

Where You Will Make a Difference

• Design and implement secure multi-cloud infrastructure using Terraform/Terragrunt with security best practices
• Design and implement secure CI/CD pipeline infrastructure with SAST/DAST integration and security gates
• Architect and deploy Azure Sentinel SIEM infrastructure with Logic Apps for automated incident response
• Build and maintain Cloudflare Zero Trust network architecture, tunnels, and security policies
• Develop Infrastructure as Code templates for secure Kubernetes clusters with network policies and RBAC
• Implement comprehensive secrets management infrastructure using AWS Secrets Manager and HashiCorp Vault
• Design security monitoring infrastructure with centralized logging using ELK stack and FluentBit
• Build automated vulnerability scanning infrastructure and remediation workflows
• Implement database security hardening for MySQL, PostgreSQL, and Redis clusters
• Design network segmentation and micro-segmentation strategies for containerized environments
• Develop security automation tools and infrastructure for threat hunting and incident response
• Architect backup and disaster recovery infrastructure with security controls and encryption
• Build security testing infrastructure for application and infrastructure vulnerability assessments

Who You Are

• 10+ years of Infrastructure Security/DevSecOps experience in enterprise environments
• Expert-level Terraform/Terragrunt skills for secure infrastructure provisioning
• Deep knowledge of AWS security services (GuardDuty, Security Hub, Config, CloudTrai, EKS, ECR, RDS, EC2, ECS, S3l)
• Proficiency in Kubernetes security architecture (Pod Security Standards, Network Policies, RBAC)
• Hands-on experience with infrastructure vulnerability scanning and hardening
• Expertise in network security architecture and Zero Trust implementation
• Strong knowledge of container security and image scanning infrastructure
• Experience with SIEM/SOAR infrastructure design and implementation
• Understanding of PKI infrastructure and certificate management at scale
• Knowledge of database security architecture and encryption strategies
• Experience with infrastructure compliance automation and policy as code
• Proficiency in security automation scripting (Python, Go, Bash)
• Ability to design secure CI/CD infrastructure and supply chain security
• Strong infrastructure troubleshooting and security incident response skills

Nice to have

• Security certifications (CISSP, CCSP, AWS Security Specialty, AWS Solution Architect, AWS DevOps Professional)
• Knowledge of service mesh security architecture (Istio, Linkerd)
• Familiarity with infrastructure security scanning tools
• Experience with security orchestration and automated remediation platforms
• Understanding of threat modeling and security architecture review processes
• Knowledge of infrastructure penetration testing and red team exercises
• Experience with security metrics and KPI infrastructure for executive reporting

Why Join Us

• Recognised as one of Switzerland’s Best Managed Companies by Deloitte in 2024 and 2025
• Bi-annual company-wide trips, including Armenia in 2023 and Switzerland in 2025, with more to come
• Fully remote work from Germany, the UK, Armenia, or France
• A flexible, employee-focused culture
• An innovative and collaborative team environment
• Great working conditions designed to support your best work