Назад
Company hidden
2 дня назад

DevSecOps Engineer (AWS)

Формат работы
remote (только Europe)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
France/Switzerland
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
DevSecOps Engineer (AWS): Designing and securing multi-cloud infrastructure, Kubernetes environments, and CI/CD supply chains with an accent on AWS, Terraform/Terragrunt, vulnerability management, and compliance. Focus on implementing secure IaC, container and identity controls, automated threat detection, and supply-chain security across cloud platforms.

Location: France or Switzerland; remote

Company

hirify.global provides a shared 2D/3D environment that connects architects, engineers, contractors, and owners working on complex construction and infrastructure projects.

What you will do

  • Design and implement secure multi-cloud infrastructure using Terraform and Terragrunt, with primary emphasis on AWS and expansion toward Alibaba Cloud and GCP.
  • Build vulnerability-management workflows covering scanning, triage, remediation, cloud infrastructure, and endpoints.
  • Secure Kubernetes clusters and containerized environments through node hardening, Pod Security Standards, network policies, RBAC, runtime controls, and image scanning.
  • Integrate SAST, DAST, security gates, secret scanning, branch protection, and dependency management into CI/CD and GitHub workflows.
  • Implement secrets management, cloud IAM, Zero Trust controls, database hardening, and encrypted backup and disaster-recovery infrastructure.
  • Deploy detection and log-aggregation infrastructure, troubleshoot incidents, and support automated incident response.

Requirements

  • Expert-level experience with Terraform and Terragrunt across multi-account, multi-region environments; 5+ years is preferred.
  • Hands-on experience with Kubernetes, container runtime security, registry-integrated vulnerability scanning, and secure cluster configuration.
  • Proficiency in security automation scripting with Python, Go, or Bash.
  • Experience with threat modeling, security architecture reviews, infrastructure troubleshooting, and incident response.
  • Experience securing CI/CD pipelines, GitHub repositories, cloud identities, secrets, databases, and backup infrastructure.

Nice to have

  • AWS Security Specialty, CISSP, CCSP, or Azure Security Engineer certification.
  • Experience with Falco, OPA Gatekeeper, Prisma Cloud, Istio, or Linkerd.
  • Familiarity with SOAR platforms, infrastructure penetration testing, GitOps, and secure software supply-chain methodologies.

Culture & Benefits

  • Flexible, employee-focused work culture.
  • Innovative and collaborative working environment.
  • Company-wide trips and team events.
  • Working conditions designed to support effective remote work.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →