DevSecOps Engineer

About the Role

Ready to shape the security posture of high-scale cloud environments from the ground up? We are seeking a talented
DevSecOps Engineer
to drive our security roadmap, automate pipelines, and embed a robust security culture directly within our engineering ecosystem. This is a fully on-site opportunity designed for a technical professional who thrives on real-time collaboration, immediate impact, and working side-by-side with world-class engineering teams.

About the Client

Our partner is a tech company building product engineering across Fintech, iGaming, and Marketing. They turn innovative ideas into high-performing engines and launch them at scale. As their exclusive recruitment partner, we manage their full-cycle talent acquisition.

What You Will Do

• Drive and define
  the strategic direction, security roadmaps, and DevSecOps culture across the entire organization.
• Collaborate
  closely with DevOps teams to architect secure Kubernetes (EKS) environments, Istio setups, and Service Mesh configurations.
• Champion security principles
  by mentoring, training, and seamlessly transferring secure architectural services to DevOps support teams.
• Deploy and configure
  Open Policy Agent (OPA) alongside advanced virtualization configuration security analyzers.
• Harden and optimize
  CI/CD pipeline security, ensuring infrastructure-as-code (IaC) frameworks like Terraform and Ansible are thoroughly secured.
• Integrate and automate
  continuous security scanning tools directly into the deployment pipelines.
• Eliminate manual overhead
  by writing automation workflows for complex security processes and compliance checks.

What You Bring

• Core DevOps & Cloud Expertise:
  Strong foundation in DevOps methodologies, CI/CD pipelines, and cloud security architectures (AWS or GCP).
• Orchestration & IaC:
  Hands-on experience with Kubernetes, service mesh technologies, and configuration management tools (such as Terraform, Ansible, or Chef).
• Security & Infrastructure Auditing:
  Proven experience analyzing cloud infrastructure for information security risks and executing mitigation strategies.
• Identity & Access Management:
  Deep knowledge of automating access controls and implementing secrets management tools (like HashiCorp Vault or privileged user control systems).
• Secure SDLC:
  A strong understanding of secure software development lifecycle (SSDLC) principles, ideally using frameworks like OWASP SAMMv2.
• Technical Fundamentals:
  Proficient with version control systems (Git), web server and database administration, the TCP/IP protocol stack, and the OSI model.

What's in It for You

• True Ownership:
  You will have the autonomy to influence our security roadmap and make architectural decisions that protect our production environments.
• Impactful Work:
  Your work directly safeguards real-money flows and critical financial data, making a tangible difference in the security of our users.
• Collaborative Culture:
  Join a cross-functional team of experts in engineering, fraud, and payments who value security and knowledge sharing.
• Continuous Growth:
  We invest in your professional development through support for advanced certifications, conference attendance, and research time.
• Competitive Benefits:
  We offer a comprehensive benefits package, including competitive compensation, health coverage, and flexible working arrangements.