Cloud Engineer (DevSecOps)

Location: Hybrid in Kraków, Poland, with 1 day per week in the office

Salary: 15,000–26,000 PLN gross per month on an employment contract

Company

hirify.global is a large home improvement company operating brands including Castorama, B&Q, Screwfix, Brico Dépôt, and Koçtaş.

What you will do

• Build, operate, and improve secure, scalable, and reliable cloud platform capabilities across AWS and GCP.
• Develop and maintain automation for infrastructure, CI/CD pipelines, and security controls.
• Design, implement, maintain, troubleshoot, and optimise IaaS, PaaS, cloud infrastructure, and platform tooling.
• Collaborate with the Tech Lead, Principal Engineer, engineering teams, security stakeholders, and business stakeholders to deliver platform initiatives.
• Define and improve platform standards, engineering guidelines, best practices, technical documentation, and trusted paths to production.
• Support platform operations through monitoring, incident troubleshooting, problem resolution, and continuous improvement.

Requirements

• Hands-on experience with AWS or GCP, with strong practical expertise in at least one platform.
• Proficiency with Terraform and Infrastructure as Code principles for modular, scalable, and secure cloud provisioning.
• Solid understanding of cloud networking, including VPC/VNet architecture, routing, firewall rules, private endpoints, and hybrid/VPN connectivity.
• Practical experience implementing cloud IAM, including RBAC, service accounts, least privilege, and workload/workforce identity federation.
• Working knowledge of DevSecOps practices and integrating security guardrails into the software delivery lifecycle.
• Proven experience building and maintaining CI/CD pipelines, preferably with GitLab CI.
• Hands-on scripting proficiency with Python and Bash.
• Experience in Agile/Scrum delivery environments using work-tracking tools such as Jira.
• Strong troubleshooting and analytical skills focused on reliability and developer enablement; excellent written and verbal communication skills in English.

Nice to have

• Multi-cloud experience across AWS and GCP.
• Experience with enterprise firewalls or security appliances such as Google Cloud NGFW or Palo Alto VM-Series.
• Familiarity with observability and logging suites such as Datadog, CloudWatch, or Google Cloud Operations.
• Exposure to container and infrastructure vulnerability scanning tools such as Trivy, Snyk, or GitLab integrated scanners.
• Understanding of cloud cost optimisation and FinOps practices.

Culture & Benefits

• Flexible and agile working with a blend of home working and office-based work; attendance in the Kraków office is required 1 day per week.
• Private medical healthcare at LUXMED, including dental care, for the employee and family.
• Medicover sports card, employer-financed life insurance, child insurance, and an annual bonus opportunity aligned to the role level.
• Eight-hour working day with a 30-minute lunch break, plus public transport ticket co-financing in Kraków.
• Training and buddy programme, language and accounting courses, LinkedIn Learning access, and possible co-financing for studies and certifications.
• Inclusive, professional environment supporting experimentation, new ideas, wellbeing, and career development.