Senior DevSecOps Engineer

This is a fully remote position, open to applicants in Ukraine.

📋 Description

• Design, secure, and manage AWS infrastructure components such as EKS/ECS, Lambda, S3, RDS, VPC, and IAM.

• Take ownership of cloud security measures, including implementing least-privilege IAM, encryption protocols, secrets management, network segmentation, and threat detection strategies.

• Strengthen production Kubernetes environments through RBAC, network policies, adherence to pod security standards, admission control, and runtime security practices.

• Oversee infrastructure as code using Terraform, incorporating policy-as-code and establishing security guardrails.

• Develop CI/CD pipelines that include integrated SAST, dependency scanning, container image scanning and signing, along with secret detection mechanisms.

• Manage monitoring, logging, and alerting systems.

• Lead incident response efforts, addressing security incidents and conducting post-mortem analyses.

• Implement vulnerability management and patching processes, while rectifying audit findings.

• Provide secure support for data and AI/LLM workloads.

• Keep cloud expenditures under control.

• Collaborate closely with Python backend, data, and AI teams.

⛳️ Requirements

• A minimum of 5 years in DevOps, SRE, or platform engineering, with at least 3 years of experience managing AWS and Kubernetes in production environments.

• Practical experience in cloud and infrastructure security, including IAM, KMS/secrets management, network security, GuardDuty, and Security Hub.

• Proven track record with Kubernetes in production, focusing on Kubernetes security aspects such as RBAC, network policies, and pod security.

• Proficient in AWS services: EKS, ECS, Lambda, S3, RDS, and VPC.

• Experience with Terraform and infrastructure as code principles.

• Knowledge of secure CI/CD practices and DevSecOps tools, including SAST and image/dependency scanning.

• Familiarity with observability tools and incident response frameworks (e.g., Prometheus, Grafana, ELK, CloudWatch).

• Proficient in Docker and containerization technologies.

• Scripting skills in Python and Bash.

• Strong foundational knowledge in Linux and networking.

• Fluent in both English and Ukrainian.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Opportunities for professional development and training.

• Flexible working hours and remote work options.

• Comprehensive health insurance and wellness programs.