DevSecOps Engineer

About the Opportunity DevSecOps Engineer specializes in designing and implementing secure infrastructure architecture within our multi-cloud environment. This role focuses on building security-first infrastructure solutions, threat detection systems, and compliance frameworks across AWS and Alibaba Cloud platforms.Where You Will Make a Difference Design and implement secure multi-cloud infrastructure using Terraform/Terragrunt with security best practicesDesign and implement secure CI/CD pipeline infrastructure with SAST/DAST integration and security gatesArchitect and deploy Azure Sentinel SIEM infrastructure with Logic Apps for automated incident responseBuild and maintain Cloudflare Zero Trust network architecture, tunnels, and security policiesDevelop Infrastructure as Code templates for secure Kubernetes clusters with network policies and RBACImplement comprehensive secrets management infrastructure using AWS Secrets Manager and HashiCorp VaultDesign security monitoring infrastructure with centralized logging using ELK stack and FluentBitBuild automated vulnerability scanning infrastructure and remediation workflowsImplement database security hardening for MySQL, PostgreSQL, and Redis clustersDesign network segmentation and micro-segmentation strategies for containerized environmentsDevelop security automation tools and infrastructure for threat hunting and incident responseArchitect backup and disaster recovery infrastructure with security controls and encryptionBuild security testing infrastructure for application and infrastructure vulnerability assessmentsWho You Are 10+ years of Infrastructure Security/DevSecOps experience in enterprise environmentsExpert-level Terraform/Terragrunt skills for secure infrastructure provisioningDeep knowledge of AWS security services (GuardDuty, Security Hub, Config, CloudTrai, EKS, ECR, RDS, EC2, ECS, S3l)Proficiency in Kubernetes security architecture (Pod Security Standards, Network Policies, RBAC)Hands-on experience with infrastructure vulnerability scanning and hardeningExpertise in network security architecture and Zero Trust implementationStrong knowledge of container security and image scanning infrastructureExperience with SIEM/SOAR infrastructure design and implementationUnderstanding of PKI infrastructure and certificate management at scaleKnowledge of database security architecture and encryption strategiesExperience with infrastructure compliance automation and policy as codeProficiency in security automation scripting (Python, Go, Bash)Ability to design secure CI/CD infrastructure and supply chain securityStrong infrastructure troubleshooting and security incident response skillsPreferred Qualifications:Security certifications (CISSP, CCSP, AWS Security Specialty, AWS Solution Architect, AWS DevOps Professional)Knowledge of service mesh security architecture (Istio, Linkerd)Familiarity with infrastructure security scanning toolsExperience with security orchestration and automated remediation platformsUnderstanding of threat modeling and security architecture review processesKnowledge of infrastructure penetration testing and red team exercisesExperience with security metrics and KPI infrastructure for executive reportingWhy Join Us Awarded Best Managed Company of Switzerlandby Deloitte in 2024 and 2025Bi-Annual Company Wide Trips (2023 Armenia 2025 Switzerland and more to come!) Fully Remote Work from either Germany, UK or FranceHigh Flexibility Employee-Focused CultureInnovative and Collaborative TeamGreat Working ConditionsOriginally posted on Himalayas