Senior DevSecOps Engineer

Job role: DevSecOps Engineer

Work location: Poland, Sweden, Germany with 100% Remote work

Mandatory skill required : AWS (EKS, RDS, EC2, IAM, VPC, CloudFormation, EBS); Azure fundamentals (AKS, networking, identity).

• Kubernetes operations (deployments, ingress, Helm).

• CI/CD: Azure DevOps Pipelines, GitHub (Actions); self hosted runners/agents on AWS.

• DevSecOps tools: Artifactory, SonarQube, Fortify, Confluence.

• Linux, Shell, Docker; TLS & secrets management.

• Observability: Datadog.

Key Responsibilities

• Leadership & Stakeholders

• Lead a team of DevSecOps engineers (mentoring, backlog/priority, code reviews, standards).

• Engage with delivery leadership, product owners, security, and infra teams; translate requirements, align roadmaps, and manage expectations.

• Drive incident/post incident reviews, RCA, risk management, and proactive improvement plans.

• Cloud & Platform Ops

• Architect, implement, and maintain AWS infrastructure (EKS, RDS, EC2, IAM, VPC, CloudFormation, EBS) and contribute to growing Azure workloads (AKS, IAM/Entra ID fundamentals, networking).

• Operate Kubernetes (EKS/AKS) at scale: deployments, ingress, Helm, performance, cost & capacity.

• Toolchain & CI/CD

• Own the DevSecOps toolchain lifecycle: Artifactory, SonarQube, Fortify, Confluence, GitGuardian, Sonatype (deploy/upgrade, hardening, monitoring, DR).

• Run self hosted agents on AWS for Azure DevOps Pipelines; extend CI/CD with GitHub (Actions, Advanced Security) and champion GitHub Copilot adoption & guardrails.

Security & Observability:

• Integrate security in pipelines (SAST/SCA/secret scanning), manage TLS certs and secrets.

• Standardize Datadog dashboards/alerts/traces/logs; remove legacy Prometheus/Grafana.

• Identity & Access

• Design secure access with LDAP, SAML, SCIM, Azure AD (Entra ID), SSO.

• Reliability

• Define/execute backup & disaster recovery strategies for critical apps.

Define/execute backup & disaster recovery strategies for critical apps.

Primary Skills:

• AWS (EKS, RDS, EC2, IAM, VPC, CloudFormation, EBS); Azure fundamentals (AKS, networking, identity).

• Kubernetes operations (deployments, ingress, Helm).

• CI/CD: Azure DevOps Pipelines, GitHub (Actions); self hosted runners/agents on AWS.

• DevSecOps tools: Artifactory, SonarQube, Fortify, Confluence.

• Linux, Shell, Docker; TLS & secrets management.

• Observability: Datadog.

Secondary Skills:

• IAM/Federation: LDAP, SAML, SCIM, Azure AD (Entra ID), SSO.

• Infrastructure as Code: Terraform (nice to have).

• ITSM/ServiceNow, change/incident/problem processes.

• Copilot enablement: patterns, prompts, policy & governance.

Qualifications:

• Bachelor’s in CS/Engineering (or equivalent).

• 7+ years in DevOps/DevSecOps with proven team leadership.

• Strong AWS & Kubernetes operations; Azure exposure.

• Excellent communication, stakeholder influence, and decision-making