We are looking for an experienced Senior DevSecOps Engineer for our client, who will advance their cloud and on-premise infrastructure and help develop CI/CD processes with a focus on security.

Your task will be to integrate security principles into all phases of development and operations – from design, through deployment, to monitoring. You will work with technologies such as Kubernetes and OpenShift, hybrid environments (Azure and private clouds), modern DevSecOps tools, and projects where security is not just an add-on but a foundation.

What you will be responsible for

• CI/CD and automation – management and development of GitLab CI/CD, creating efficient pipelines for various types of applications, deployment via ArgoCD and GitOps.
• Security and compliance – implementation of Security-as-Code, integration of controls (SAST, DAST, SCA), vulnerability management, patching, and incident response.
• Infrastructure and orchestration – design and management of Kubernetes/OpenShift clusters, configuration and optimization of container platforms, troubleshooting.
• Monitoring and observability – working with OpenTelemetry, Prometheus, Grafana, Jaeger, Zipkin, centralized logging (EFK/Loki), alerting, and post-mortem analysis.
• Cloud and on-premise – management of environments in Azure and private clouds, hybrid infrastructure, Terraform, and Ansible.
• Collaboration with development – supporting the team in containerization (Java, React, Angular), code review for infrastructure code and CI/CD configurations.

• Practical experience with DevSecOps in an enterprise environment.
• Advanced knowledge of Kubernetes/OpenShift – architecture, security, installation, operation, troubleshooting.
• Expertise in GitLab CI/CD – managing monorepo, creating secure pipelines with security scans.
• ArgoCD and GitOps in practice.
• Knowledge of Helm, DevSecOps tools (SonarQube, OWASP ZAP, Snyk, Trivy, Twistlock).
• OpenTelemetry and observability stack (Prometheus, Grafana, Jaeger, Elasticsearch, Loki).
• Good understanding of cybersecurity (NIS2, ISO 27001, NIST).
• Experience with hybrid cloud (Azure + on-premise).
• Terraform at an advanced level.
• Knowledge of Docker, Podman, and managing secure registries.

What we will appreciate 

• Experience with GCP or AWS.
• Overlap into development (Java/Spring Boot, React, Angular).
• Certifications in security or DevSecOps (CISSP, CISM, CEH, CKA, CKAD, Terraform Associate, GitLab Certified).
• Experience with service mesh (Istio, Linkerd), Vault, Falco, OPA/Gatekeeper.
• Scripting and automation (Python, Go, Bash).
• Penetration testing.

• We are not a corporation! 🙂
• We offer you fair compensation based on your own skills.
• We are a company where friendship is important because we grew up on friendly relationships. We want to maintain a friendly atmosphere at all costs.
• Every idea you have counts, your voice will not be overlooked, and we will always value your opinions.
• You will have many smart people around you who do not keep their know-how to themselves but are happy to share it. You can grow professionally with us – it will be entirely in your hands.
• It will also be up to you how you organize your time, vacation, capacity for projects, etc.