DevSecOps Engineer (Kubernetes)

Location: Hybrid in Porto or Lisbon, Portugal

Company

hirify.global delivers technology solutions and support for business investment banking and financial services operations through its technological hub in Portugal.

What you will do

• Develop and support innovative technology solutions for business investment banking and financial services operations.
• Drive infrastructure innovation, prototype technologies, and lead architectural improvements.
• Reduce manual toil and improve team velocity through automation.
• Build and maintain CI/CD, containerization, orchestration, cloud, monitoring, and centralized logging capabilities.
• Implement application, container, secrets, compliance, and policy-as-code security practices.
• Explore AI agents, LLM applications, prompt engineering, and LLM-based tooling for operations.

Requirements

• Bachelor's degree in Computer Science, Engineering, or equivalent experience.
• 6–9 years of professional experience, including 5+ years in DevOps, Infrastructure Engineering, SRE, or related roles.
• 3+ years driving innovation, prototyping technologies, or leading architectural improvements.
• Proven track record of reducing manual toil and improving team velocity.
• Expert-level Infrastructure-as-Code principles and practices, with proficiency in Python, Go, Java, or Bash.
• Strong CI/CD expertise with Jenkins, GitLab CI, and GitHub Actions; deep Docker and Kubernetes or OpenShift experience.
• Linux/Unix system administration experience with RHEL, CentOS, or Ubuntu, plus Git mastery including GitFlow and branching strategies.
• Experience with AWS, Azure, or GCP.
• Good understanding of application security principles, including OWASP Top 10; security scanning automation with SAST/DAST tools such as SonarQube, Checkmarx, or ZAP.
• Good understanding of container security scanning with Trivy or Aqua, secrets management with HashiCorp Vault or AWS Secrets Manager, compliance frameworks including PCI-DSS, GDPR, or SOX, and security policy-as-code with OPA or Kyverno.
• Understanding of AI agents and LLM applications in operations, plus familiarity with prompt engineering and LLM-based tooling.
• Familiarity with Prometheus, Grafana, ELK Stack, Datadog, Splunk, or CloudWatch for monitoring and centralized logging.
• Good level of English.

Nice to have

• Familiarity with financial services or regulated industries.

Culture & Benefits

• Health insurance.
• Personalized training plan with a training budget.
• Constant feedback and professional development support.
• Remote onboarding process.
• Team events every semester.
• Culture of proximity and transparency where ideas and needs are heard and valued.