DevSecOps Engineer

About the role

We are looking for a DevSecOps Engineer to design, implement and operate secure cloud‑native solutions. You will work across AWS and Azure environments, automate security controls, and ensure the reliability of endpoint and web‑application services.

Key responsibilities

• Develop and maintain automation for endpoint security tools such as Microsoft Intune, CrowdStrike, CyberArk and Tanium.
• Implement zero‑trust and identity‑access management solutions using SAML, Azure Entra, Okta and AWS IAM.
• Design, provision and manage cloud resources on AWS (Lambda, ECS Fargate, S3, DynamoDB, etc.) and Azure (Logic Apps, Functions, VMs, etc.) using Terraform and IaC best practices.
• Build and operate CI/CD pipelines with GitLab CI, Docker and Kubernetes, ensuring secure code delivery.
• Configure and monitor Cloudflare services (Access, Gateway, WAF) and web‑application firewalls.
• Develop SRE practices with the ELK stack for proactive monitoring, alerting and performance tracking.
• Collaborate with Agile teams, facilitate Scrum/Kanban ceremonies and drive continuous improvement.

Required profile

• Strong background in software development with clean, maintainable code.
• Experience securing endpoint devices and web applications in a cloud environment.
• Hands‑on knowledge of both AWS and Azure services and security frameworks.
• Proven ability to automate infrastructure and security workflows.
• Familiarity with Agile methodologies and DevSecOps culture.

Required skills

• Python, Java, Node.js, JavaScript/TypeScript, Shell, PowerShell
• SQL
• Git
• AWS DynamoDB, SQS, Lambda, S3, ECS Fargate, ECR, EC2, IAM, CloudWatch, VPC, Subnet, NACL, WAF, Step Functions
• Azure Logic Apps, Entra, PIM, Power Automate, VMs, Azure Virtual Desktop, Azure Functions
• Terraform
• Docker, Kubernetes
• GitLab CI, Taskfile
• Cloudflare Access, Gateway, WAF
• Microsoft Intune, CrowdStrike, CyberArk, Tanium
• SAML, Azure Entra, Okta, AWS IAM
• Elasticsearch, Logstash, Kibana