DevOps Engineer (Travel and Transportation)

Location: Bulgaria, Lithuania, or Poland; remote and hybrid work options are available.

Company

hirify.global is delivering a cloud-native, AI-powered travel technology platform for airlines and hospitality brands, supporting commercial performance, cost reduction, and digital commerce.

What you will do

• Own and improve cloud security across GCP organizations and AWS accounts, including runtime protection, custom policies, finding triage, and integrations with Jira, PagerDuty, and Slack.
• Operate Cloudflare WAF, bot management, rate limiting, DNS, TLS, DDoS protection, and origin routing for customer-facing production zones.
• Automate vulnerability management, secure configuration, SAST, dependency scanning, container hardening, and remediation tracking.
• Respond to cloud security incidents, including DDoS and bot attacks, supply-chain alerts, credential exposure, and data-handling incidents.
• Produce repeatable technical evidence for SOC 2, PCI DSS, ISO 27001, and NIS2 compliance.
• Train Platform, CloudOps, and Product Engineering teams and advise on platform integrations, AI/RAG services, and the cloud-security roadmap.

Requirements

• 5+ years of experience in cloud security or platform engineering with a security focus.
• Hands-on GCP experience, including GKE, IAM, audit logging, log sinks, Cloud Armor, and VPC networking.
• Production experience with Wiz or another CNAPP/CSPM platform, including policy authoring, integrations, and runtime protection.
• Experience administering WAF, CDN, and bot-management infrastructure at scale, with strong Terraform skills.
• Experience with vulnerability management, SAST, SCA/dependency scanning, container image hardening, SIEM integrations, and security incident response.
• Python or Bash scripting skills and the ability to communicate clearly, train engineering teams, and document security decisions.

Nice to have

• AI-assisted or LLM-based security workflow automation experience.
• AWS and Azure experience, or familiarity with Rego, OPA, and policy-as-code.
• Experience with IAM tooling, OWASP SAMM, threat modeling, or security-champions programs.
• Airline or travel-industry experience and familiarity with PCI-scoped payment flows.
• Relevant cloud-security certifications, such as Google Professional Cloud Security Engineer, CCSP, or AWS Certified Security – Specialty.

Culture & Benefits

• Remote and hybrid work options within the stated locations.
• Technical and non-technical training, internal conferences, and meetups.
• Mentorship from experienced employees.
• Health insurance and sports activities.
• Referral program, work anniversary program, and additional vacation days.