Senior DevOps Engineer

At
HEINEKEN
, we are on a journey to become the best‑connected brewer in the world, with
Digital Commerce
playing a central role in this ambition. Digital Commerce is responsible for designing, developing and scaling the IT solutions that serve our customers better, faster and smarter across the entire Route‑to‑Consumer ecosystem. After successfully building our software engineering organization, we are now entering the next stage of our evolution by accelerating the growth of Digital Commerce. We deliver digital products that directly support company revenue while elevating customer experience. Join us in shaping the technological capabilities that power
HEINEKEN’s global Commerce strategy
.

Would you like to meet the Team, see our office and much more? Visit our website: Heineken (heineken-dt.pl).
As the
DevOps Engineer
, you will be part of the development team responsible for DevOps environment operation, including release automation for in-house products. Collaborating closely with Product Owner(s), Product Architect(s) and other DevOps teams you will need to understand the technical and business needs, helping to convert those needs into further development of the DevOps landscape and services in line with overall engineering standards and roadmaps. Driving excellence in engineering practices to deliver high-quality solutions throughout the software development lifecycle in our Commerce IT landscape, will be important element of your role.

The role reports directly to the Engineering Manager.

Your responsibilities will include:

• development automated pipelines for building, testing, and deploying software applications
• utilizing infrastructure automation tools to provision and manage cloud infrastructure resources in a scalable and repeatable manner
• driving operational excellence implementing automation, monitoring, and performance optimization strategies
• implementing robust monitoring and alerting solutions to ensure the health and performance of our systems
• balancing trade-offs between performance, scalability, cost, and time-to-market
• hosting containerized applications using Docker and orchestrate containerized workloads
• monitoring and optimize cloud financials.

Technology Stack:
Mandatory to know:

• Azure
• Azure DevOps and CI/CD Pipelines
• Docker / Podman
• Terraform
• Kubernetes
• Basic JavaScript, C#

Optional, but will be strong advantage:

• ArgoCD
• Crossplane

You are a good candidate if you have:

• 1-3 years of working experience in the similar position
• hands-on experience with Microsoft Azure cloud platform
• proficiency in DevOps tools and practices including CI/CD, IaC, monitoring, and containerization
• strong communication and collaboration skills with the ability to work effectively in a team environment
• knowledge about security best practices for cloud-based environments
• ability to work as a pragmatic, and collaborative team player.

At HEINEKEN Kraków, we take integrity and ethical conduct seriously. If someone has concerns about a possible violation of legal regulations indicated in Polish Whistleblowing Act or our Code of Business Conduct, we encourage them to speak up. Cases can be reported to global team or locally (in line with the local HGSS Whistleblowing procedure) by selecting proper option in this tool or by communicating it on hotline.

At
HEINEKEN
, we are on a journey to become the best‑connected brewer in the world, with
Digital Commerce
playing a central role in this ambition. Digital Commerce is responsible for designing, developing and scaling the IT solutions that serve our customers better, faster and smarter across the entire Route‑to‑Consumer ecosystem. After successfully building our software engineering organization, we are now entering the next stage of our evolution by accelerating the growth of Digital Commerce. We deliver digital products that directly support company revenue while elevating customer experience. Join us in shaping the technological capabilities that power
HEINEKEN’s global Commerce strategy
.

Would you like to meet the Team, see our office and much more? Visit our website: Heineken (heineken-dt.pl).
As the
Senior DevOps Engineer
, you will be part of the software development team and you will be responsible for delivering, managing and maintaining a DevOps environment, including CI/CD, configuration management and release automation for in-house products. Collaborating closely with Product Owner(s), Product Architect(s) and other software engineering teams you will need to understand the technical and business needs, helping to convert those needs into further development of the DevOps landscape and services in line with overall engineering standards and roadmaps. You will also drive excellence in engineering practices to deliver high-quality solutions throughout the software development lifecycle in our Commerce IT landscape.

The role reports directly to the Engineering Manager.

Your responsibilities would include:

• working with software developers, QAs, and other staff (e.g. system administrators, network engineers, etc.) to improve delivery process and oversee code releases and deployments
• being important contributor of a multi-team effort to deliver, manage and maintain configuration and release automation to meet business needs
• contributing to enhancing of the end-to-end development process and ensure ongoing platform reliability and availability
• developing automated pipelines for building, testing, and deploying software applications, by creating, maintaining and documenting continuous integration (CI) and continuous deployment (CD) environments to facilitate a development process
• supporting and enhance build and release processes through automation, monitoring, and performance optimization strategies with a combination of processes and tools
• establishing standards/guidelines for how software and infrastructure should be configured, to allow teams for effective work and smooth CI/CD processes
• driving operational excellence implementing automation, monitoring, and performance optimization strategies
• recommending, develop and implement system enhancements that will improve the performance and reliability of the system including installing, upgrading/patching, monitoring, problem resolution, configuration management and security
• contributing to mechanisms/architectures that enable fault tolerance and rapid recovery from failure
• being involved in discussions on the trade-offs between performance, scalability, cost, and time-to-market
• participating in ongoing systems development efforts to build and scale the infrastructure of our delivery platform
• ensuring that the underlying infrastructure that supports software development, testing, and production is properly automated; contribute to improvements of infrastructure, architecture, and monitoring.

Technology Stack:
Mandatory to know:

• Azure
• Azure DevOps & CI/CD Pipelines
• Docker / Podman
• Terraform
• Kubernetes (AKS)
• ArgoCD
• Crossplane

Optional, but will be strong advantage:

• Traefic
• Azure Front Door, WAF
• ACME certificates
• Experience with AKS cost optimization

You are a good candidate if you have:

• at least 5 years of experience as a DevOps Engineer and 8+ years of overall experience in IT
• experience in designing, building, integrating and managing Continuous Integration and Continuous Deployment (CI/CD) pipelines using tools: Azure DevOps, Azure Repos, Azure Pipelines
• hands on experience in management, configuration and maintenance of Azure DevOps
• Microsoft certifications (AZ-104: Microsoft Azure Administrator & AZ-305: Designing Microsoft Azure Infrastructure Solutions, AZ-400: Designing and Implementing Microsoft DevOps Solutions) - nice to have
• hands on experience with Infrastructure as Code (IaC)
• proficiency in Version Control Systems (VCS), including branching, merging, pull requests, conflict resolution and workflows, using Azure Repos and knowledge of Git
• working experience in release management
• experience in integration of various services into the pipelines, e.g. monitoring and communication tools
• knowledge of security best practices for cloud-based environments
• strong organization and verbal and written communication skills, with the ability to communicate technical information clearly and effectively to non-technical stakeholders
• problem-solving skills with ability to diagnose and troubleshoot complex infrastructure, application, and automation issues
• willingness to learn and adapt to new tools, technologies, and processes as DevOps evolves
• pragmatic, and collaborative team player.

At HEINEKEN Kraków, we take integrity and ethical conduct seriously. If someone has concerns about a possible violation of legal regulations indicated in Polish Whistleblowing Act or our Code of Business Conduct, we encourage them to speak up. Cases can be reported to global team or locally (in line with the local HGSS Whistleblowing procedure) by selecting proper option in this tool or by communicating it on hotline.

Company Description
Software Mind develops solutions that make an impact for companies around the globe. Tech giants & unicorns, transformative projects, emerging technologies and limitless opportunities – these are a few words that describe an average day for us. Building cross-functional engineering teams that take ownership and crave more means we’re always on the lookout for talented people who bring passion and creativity to every project. Our culture embraces openness, acts with respect, shows grit & guts and combines employment with enjoyment.

Job Description
Project – the aim you’ll have
The role will be part of a delivery stream-aligned engineering team, with responsibility for providing and managing the technical platform that enables Application Development teams to deliver and run business systems efficiently.

The focus of the role is to ensure the technical estate and skill set of the relevant delivery stream remain aligned with departmental strategy, and that delivery teams work efficiently using best-practice delivery approaches.

Position – How You’ll Contribute
As a DevOps Engineer, you can expect to be involved in the following activities:

• Work with the Principal DevOps Engineer and other groups within the department, such as the Developer Community, Architecture, Central Platform Engineering, and other delivery stream engineering teams, to enforce existing standards and contribute to their evolution.
• Ensure delivery stream teams are making good use of available tooling and platform elements, and aid in upskilling and maintaining their level of knowledge in relevant platform tools and modern development practices with a focus on productivity and efficiency.
• Deliver technical life-cycling changes and ensure our development platform remains supported, capable, and evergreen.
• Help the delivery teams to design and deliver systems that meet required Non-Functional Requirements for each tech stack and project, in particular, this should emphasise reliability, robustness, and maintainability.
• Assist delivery teams in diagnosing and correcting platform and tooling issues, collaborating with the Central Platforms team as necessary.
• Deliver software infrastructure and tooling to delivery projects, defining and evolving best practices as necessary and ensure these learnings are shared with other engineering teams.

Qualifications
Expectations – the experience you need

• CI/CD (preferred)
• Kubernetes (preferred)
• Azure DevOps (preferred)
• Pipelines (preferred)
• Application Security (preferred)
• Cloud Services/capabilities (preferred)
• General development experience with in-house systems (preferred)

Additional Skills – The Edge You Have

• Adaptability
• Digital effectiveness
• Enabling others
• Systems thinking
• Team Working

Additional Information

Our offer – professional development, personal growth

• Flexible employment and remote work
• International projects with leading global clients
• International business trips
• Non-corporate atmosphere
• Language classes
• Internal & external training
• Private healthcare and insurance
• Multisport card
• Well-being initiatives

#WORLD

Who We Are
Addepar is a global data and AI platform empowering investment professionals to turn complex financial information into actionable intelligence. Addepar unifies portfolio, market and client data in a total portfolio view and delivers AI-powered insights within investment and client workflows. More than 1,400 firms in nearly 60 countries use Addepar to manage and advise on nearly $9 trillion in assets. Its open platform integrates with nearly 650 software, data and consulting partners to power end-to-end investment operations across firms of all sizes and complexity. Addepar supports clients worldwide with offices in New York City, Salt Lake City, London, Edinburgh, Pune, Dubai, Geneva, Singapore and São Paulo.

The Role
Join Addepar’s Cloud Security team as a Sr. Cloud Security Engineer focused on building, automating, and maintaining security infrastructure and controls at scale. This role emphasizes AWS, Terraform, Python, and sophisticated networking. As part of the Cloud Security team, you will lead complex initiatives, collaborate closely with platform, operations, and data teams, and help establish paved roads and guardrails across a multi-account environment.

Addepar takes a market-based approach to pay. A successful candidate’s starting pay will be determined based on the role, job-related skills, experience, qualifications, work location, and market conditions.

The range displayed on each job posting reflects the minimum and maximum target base salary for roles in Warsaw. The current range for this role is 425,000 - 510,000 złoty (base salary) .

Your recruiter can share more about the specific salary range for your preferred location during the hiring process.

Applicants must have legal authorization to work in the country where this role is based on the first day of employment. Visa sponsorship is not available for this position.

What You’ll Do

• The primary responsibility of this role will be to maintain and iterate on Addepar’s Swiss AWS environment to enforce data locality restrictions, ensure core infrastructure is secure and operational, and integrate security best practices, policies and solutions
• Partner closely with Addepar’s Swiss Infrastructure Operations team to ensure that the highest security standards are observed across the estate
• Contribute to the Cloud Security team’s design and hardening of a multi-account AWS environment using Organizations, Control Tower, SCPs, and custom tools and guardrails
• Design and build secure networking and private resource access patterns for both human and programmatic use
• Author and maintain Terraform code to deploy security infrastructure and contribute to a secure Terraform module registry
• Write and support CI checks using policy-as-code (OPA) and IaC scanning to enforce best practices at scale
• Automate vulnerability detection and remediation using native AWS technologies, including event-driven architecture and serverless workflows
• Strengthen identity and secrets management with federation and role design, ABAC, IAM policy reviews, KMS strategy, and effective use of Secrets Manager and Parameter Store
• Utilize discovery tools and cloud native logging to perform investigations, resource discovery, and troubleshooting
• Participate in infrastructure design reviews and cloud security assessments, producing clear and actionable assessment reports
• Partner with engineering teams to deliver secure business outcomes and measure impact through coverage, prevention, and response metrics
• Act as an escalation point for Addepar’s Security Operations Center

Who You Are

• Extensive experience in security with several years experience with hands-on building and securing AWS in production, multi-account environments
• Ideally you'll have a Bachelor’s degree in CS/Engineering or equivalent practical experience
• Clear written and verbal communication skills with the ability to influence across teams and mentor others
• Expertise across AWS security best practices with deep knowledge of native AWS services
• Advanced Terraform experience including module creation, remote execution environments, and integrating security checks into CI
• Extensive experience with Python and the boto3 library
• Deep networking knowledge
• Strong Linux, container, K8s, secrets management, and CI/CD fundamentals
• Experience with policy-as-code (OPA, Rego), GitOps (GitHub Actions, Argo CD), and Zero Trust solutions

Our Values

• Act Like an Owner - Think and operate with intention, purpose and care. Own outcomes.
• Build Together - Collaborate to unlock the best solutions. Deliver lasting value.
• Champion Our Clients - Exceed client expectations. Our clients’ success is our success.
• Drive Innovation - Be bold and unconstrained in problem solving. Transform the industry.
• Embrace Learning - Engage our community to broaden our perspective. Bring a growth mindset.

In addition to our core values, Addepar is proud to be an equal opportunity employer. We seek to bring together diverse ideas, experiences, skill sets, perspectives, backgrounds and identities to drive innovative solutions. We commit to promoting a welcoming environment where inclusion and belonging are held as a shared responsibility.

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

PHISHING SCAM WARNING: Addepar is among several companies recently made aware of a phishing scam involving con artists posing as hiring managers recruiting via email, text and social media. The imposters are creating misleading email accounts, conducting remote “interviews,” and making fake job offers in order to collect personal and financial information from unsuspecting individuals. Please be aware that no job offers will be made from Addepar without a formal interview process. Additionally, Addepar will not ask you to purchase equipment or supplies as part of your onboarding process. If you have any questions, please reach out to ta-operations@addepar.com.