We are looking for a hands-on DevSecOps Engineer to join a fast-growing software development company delivering fintech and iGaming products. In this role, you will take ownership of security across cloud infrastructure, CI/CD pipelines, and development processes, helping build secure and scalable products.

Responsibilities

Drive the evolution of the company’s DevSecOps function by defining security initiatives, long-term priorities, and promoting a security-first engineering mindset

Partner with the DevOps team to improve the security and resilience of Kubernetes (EKS), Istio, Service Mesh, and related cloud-native infrastructure

Support engineering teams during service transitions by embedding security best practices into operational processes and ensuring effective knowledge sharing

Develop and maintain policy-as-code frameworks and infrastructure validation mechanisms using technologies such as OPA and other compliance automation tools

Improve the security of infrastructure provisioning and deployment workflows across Terraform, Ansible, and other Infrastructure-as-Code solutions

Integrate, maintain, and optimise security testing and scanning capabilities throughout the software development and release lifecycle

Build automation around security monitoring, compliance checks, and operational controls to increase efficiency and reduce manual effort

Requirements

Strong practical understanding of modern DevOps principles and secure CI/CD pipeline design

Hands-on experience with Kubernetes or other enterprise-grade container orchestration platforms

Proven experience working with Infrastructure-as-Code and configuration management technologies such as Terraform, Ansible, Chef, or equivalent tools

Solid background in administering production infrastructure, including web servers, databases, and supporting services

Good understanding of networking concepts, including TCP/IP, routing principles, and the OSI model

Experience securing distributed systems and microservices-based architectures

Proficiency with Git or other source code version control platforms

Practical experience securing cloud environments, preferably AWS, though experience with GCP or other major cloud providers is also valuable

Ability to assess infrastructure security posture, identify vulnerabilities, and implement appropriate remediation measures

Experience implementing identity and access management controls together with security automation practices

Hands-on knowledge of secrets management platforms (such as Vault) and Privileged Access Management (PAM) solutions

Experience integrating SAST, DAST, dependency scanning, container scanning, or similar security tooling into CI/CD workflows

Good understanding of Secure Software Development Lifecycle (SSDLC) principles and familiarity with security maturity frameworks such as OWASP SAMM v2

English level: Upper-intermediate or higher

What’s in it for you

Fully remote working format

Competitive salary based on experience

Paid annual leave and sick leave

Opportunities for professional and career growth

Supportive environment focused on continuous development and long-term growth