DevOps Engineer, Security Focus

This is a fully remote position, open to applicants in Ukraine.

📋 Description

• Establish and execute security best practices for Infrastructure as Code using Terraform, Terragrunt, and Ansible, which includes static analysis, detection of misconfigurations, and validation of compliance.

• Deploy and manage security measures for containerized environments, covering secure image management, runtime protection, and policy enforcement throughout Kubernetes clusters.

• Design and uphold secure CI/CD pipelines utilizing CircleCI, ArgoCD, and automated security testing procedures.

• Oversee secrets management protocols across the platform, which involves Vault administration, rotation policies, and integration of dynamic secrets.

• Automate processes for vulnerability scanning, compliance auditing, configuration checks, and remediation workflows.

• Develop and sustain large-scale, highly available AWS cloud infrastructure centered around Kubernetes, enhancing resiliency, reliability, and cost-effectiveness.

• Collaborate with the Security team, development teams, and other stakeholders to integrate security throughout the development lifecycle and promote cross-team initiatives.

• Take part in the DevOps on-call rotation, ensuring platform availability and aiding in security incident investigations.

• Assess and incorporate tools that enhance engineering efficiency and bolster Fiverr's security posture.

⛳️ Requirements

• A minimum of 4 years' experience as a DevOps Engineer with direct security responsibilities, or equivalent experience in DevSecOps.

• Hands-on experience with AWS and Kubernetes, specifically in securing cloud-native environments at scale.

• Familiarity with AI tooling such as Claude Code, Cursor, etc.; strong writing skills and agent development.

• More than 2 years of experience with CI/CD pipelines (CircleCI or a similar platform), including the integration of automated security testing.

• Proficient in IaC tools (Terraform, Terragrunt) and securing IaC workflows.

• Knowledge of AWS security services and practices (IAM, KMS, GuardDuty, CloudTrail); experience with CSPM platforms is a plus.

• Strong understanding of networking and network security principles, including Load Balancers, DNS, VPC, Security Groups, and WAF.

• Experience with secrets management solutions (HashiCorp Vault or a comparable alternative).

• Familiarity with container image scanning and supply chain security tools (Wiz, Trivy, Aikido, or similar).

• Experience with GitOps workflows and tools (ArgoCD or an equivalent solution).

• Proficiency with observability tools (Grafana, Prometheus, VictoriaMetrics, Coralogix, or comparable systems).

• Proven experience in designing and maintaining high-availability solutions for extensive environments.

• Security certifications such as AWS Security Specialty or CKS are beneficial.

• Development experience is a plus.

🏝️ Benefits

• Equal opportunity employment regardless of race, color, religion, sex, sexual orientation, citizenship, national origin, disability, Veteran status, or any other characteristic protected by law.

• Accommodation for individuals with disabilities or special needs.

• Participation in on-call rotation (role responsibility, not a separate compensation benefit).