The company develops fintech and iGaming products.
DevSecOps engineer for fintech and iGaming
подготовься к отклику
ai-инструментыЧтобы адаптировать резюме под вакансию или составить сопроводительное письмо, загрузи резюме
описание
задачи
- Drive the evolution of the DevSecOps function by defining security initiatives and long-term priorities, and promoting a security-first engineering mindset
- Partner with the DevOps team to improve the security and resilience of Kubernetes (EKS), Istio, Service Mesh, and related cloud-native infrastructure
- Support engineering teams during service transitions by embedding security best practices into operational processes and enabling knowledge sharing
- Develop and maintain policy-as-code frameworks and infrastructure validation mechanisms using OPA and other compliance automation tools
- Improve the security of infrastructure provisioning and deployment workflows across Terraform, Ansible, and other Infrastructure-as-Code solutions
- Integrate, maintain, and optimise security testing and scanning throughout the software development and release lifecycle
- Build automation for security monitoring, compliance checks, and operational controls to increase efficiency and reduce manual effort
требования
- Strong practical understanding of modern DevOps principles and secure CI/CD pipeline design
- Hands-on experience with Kubernetes or other enterprise-grade container orchestration platforms
- Proven experience with Infrastructure-as-Code and configuration management technologies such as Terraform, Ansible, Chef, or equivalent tools
- Solid background administering production infrastructure, including web servers, databases, and supporting services
- Good understanding of networking concepts, including TCP/IP, routing principles, and the OSI model
- Experience securing distributed systems and microservices-based architectures
- Proficiency with Git or other source code version control platforms
- Practical experience securing cloud environments, preferably AWS; experience with GCP or other major cloud providers is also valuable
- Ability to assess infrastructure security posture, identify vulnerabilities, and implement remediation measures
- Experience implementing identity and access management controls and security automation practices
- Hands-on knowledge of secrets management platforms such as Vault and Privileged Access Management (PAM) solutions
- Experience integrating SAST, DAST, dependency scanning, container scanning, or similar security tools into CI/CD workflows
- Good understanding of Secure Software Development Lifecycle (SSDLC) principles and familiarity with security maturity frameworks such as OWASP SAMM v2
- English at Upper-intermediate level or higher
условия
- Competitive salary based on experience
- Paid annual leave and sick leave
- Opportunities for professional and career growth
- Supportive environment focused on continuous development and long-term growth
навыки
Если просят выйти из iCloud, прислать код из SMS, запустить или установить что-то, перевести деньги — не соглашайся: это мошенничество.