описание
Infrastructure engineering with security embedded across the entire technology stack, including CI/CD, Kubernetes, cloud environments, secrets management, and access control.
задачи
- Integrate security checks into CI/CD pipelines, including dependency, container image, Infrastructure as Code (IaC), and secret scanning
- Harden servers, Kubernetes clusters, and cloud environments in accordance with CIS benchmarks
- Manage secrets, certificates, and the PKI lifecycle using Vault
- Manage access control (SSO, IAM, least privilege) and conduct regular access reviews
- Track and remediate vulnerabilities, coordinating patching activities across development and infrastructure teams
- Support security incident investigations, incident response, audits, and compliance activities
- Enforce Kubernetes runtime and policy security, including RBAC, network policies, Pod Security Standards (PSS), and Kyverno/OPA
- Set up and maintain production and staging infrastructure, including updates and incident resolution
- Improve infrastructure setup and maintenance processes
- Support and develop GitLab CI pipelines
- Contribute to the design of complex IT systems
- Collaborate with product development teams and stakeholders
- Handle monitoring events, including periodic day and night on-call duties
требования
- 3+years of experience as a System Engineer, SRE, or DevOps Engineer
- Solid Linux administration and troubleshooting skills
- Experience with configuration management tools such as Ansible, SaltStack, Terraform, or Pulumi
- Experience with Kubernetes and Helm
- Experience configuring GitLab CI/CD pipelines
- Experience with Anti-DDoS solutions, WAF, and WAAP (Cloudflare, Fastly, Akamai, etc.)
- Experience with monitoring tools (Prometheus stack, Zabbix)
- Strong understanding of information security fundamentals, including least privilege, defense in depth, network security, and TLS/PKI
- Experience with secrets management solutions such as HashiCorp Vault or similar
- Strong problem-solving skills
- Higher technical education
- English level B1+ and strong command of Russian
условия
- Private health insurance
- Sports benefits
- Comprehensive Mental Health Program
- Free English lessons (online)
- Local language courses
- Paid time off
- Maternity leave support
- Referral program rewards
- Upskilling, internal workshops, and participation in professional conferences and corporate events
навыки
компания
SOFTSWISS — международная технологическая компания и провайдер iGaming software для онлайн-казино и betting-продуктов.
