About This Role

<h3>About the Opportunity </h3><p>DevSecOps Engineer specializes in designing and implementing secure infrastructure<br>architecture within our multi-cloud environment. This role focuses on building<br>security-first infrastructure solutions, threat detection systems, and compliance<br>frameworks across AWS and Alibaba Cloud platforms.</p><h3>Where You Will Make a Difference </h3><ul><li>Design and implement secure multi-cloud infrastructure using<br>Terraform/Terragrunt with security best practices</li><li>Design and implement secure CI/CD pipeline infrastructure with SAST/DAST<br>integration and security gates</li><li>Architect and deploy Azure Sentinel SIEM infrastructure with Logic Apps for<br>automated incident response</li><li>Build and maintain Cloudflare Zero Trust network architecture, tunnels, and<br>security policies</li><li>Develop Infrastructure as Code templates for secure Kubernetes clusters with<br>network policies and RBAC</li><li>Implement comprehensive secrets management infrastructure using AWS<br>Secrets Manager and HashiCorp Vault</li><li>Design security monitoring infrastructure with centralized logging using ELK<br>stack and FluentBit</li><li>Build automated vulnerability scanning infrastructure and remediation workflows</li><li>Implement database security hardening for MySQL, PostgreSQL, and Redis<br>clusters</li><li>Design network segmentation and micro-segmentation strategies for<br>containerized environments</li><li>Develop security automation tools and infrastructure for threat hunting and<br>incident response</li><li>Architect backup and disaster recovery infrastructure with security controls and<br>encryption</li><li>Build security testing infrastructure for application and infrastructure vulnerability<br>assessments</li></ul><h3>Who You Are</h3><ul><li> 10+ years of Infrastructure Security/DevSecOps experience in enterprise<br>environments</li><li>Expert-level Terraform/Terragrunt skills for secure infrastructure provisioning</li><li>Deep knowledge of AWS security services (GuardDuty, Security Hub, Config,<br>CloudTrai, EKS, ECR, RDS, EC2, ECS, S3l)</li><li>Proficiency in Kubernetes security architecture (Pod Security Standards, Network<br>Policies, RBAC)</li><li>Hands-on experience with infrastructure vulnerability scanning and hardening</li><li>Expertise in network security architecture and Zero Trust implementation</li><li>Strong knowledge of container security and image scanning infrastructure</li><li>Experience with SIEM/SOAR infrastructure design and implementation</li><li>Understanding of PKI infrastructure and certificate management at scale</li><li>Knowledge of database security architecture and encryption strategies</li><li>Experience with infrastructure compliance automation and policy as code</li><li>Proficiency in security automation scripting (Python, Go, Bash)</li><li>Ability to design secure CI/CD infrastructure and supply chain security</li><li>Strong infrastructure troubleshooting and security incident response skills</li></ul><h3>Preferred Qualifications:</h3><ul><li>Security certifications (CISSP, CCSP, AWS Security Specialty, AWS Solution Architect, AWS DevOps Professional)</li><li>Knowledge of service mesh security architecture (Istio, Linkerd)</li><li>Familiarity with infrastructure security scanning tools</li><li>Experience with security orchestration and automated remediation platforms</li><li>Understanding of threat modeling and security architecture review processes</li><li>Knowledge of infrastructure penetration testing and red team exercises</li><li>Experience with security metrics and KPI infrastructure for executive reporting</li></ul><h3>Why Join Us </h3><ul><li>Awarded Best Managed Company of Switzerlandby Deloitte in 2024 and 2025</li><li>Bi-Annual Company Wide Trips (2023 Armenia 2025 Switzerland and more to come!) </li><li>Fully Remote Work from either Germany, UK or France</li><li>High Flexibility </li><li>Employee-Focused Culture</li><li>Innovative and Collaborative Team</li><li>Great Working Conditions</li></ul><p>Originally posted on <a href="https://himalayas.app">Himalayas</a></p>

About the Opportunity

DevSecOps Engineer specializes in designing and implementing secure infrastructure
architecture within our multi-cloud environment. This role focuses on building
security-first infrastructure solutions, threat detection systems, and compliance
frameworks across AWS and Alibaba Cloud platforms.

Where You Will Make a Difference

Design and implement secure multi-cloud infrastructure using
Terraform/Terragrunt with security best practices
Design and implement secure CI/CD pipeline infrastructure with SAST/DAST
integration and security gates
Architect and deploy Azure Sentinel SIEM infrastructure with Logic Apps for
automated incident response
Build and maintain Cloudflare Zero Trust network architecture, tunnels, and
security policies
Develop Infrastructure as Code templates for secure Kubernetes clusters with
network policies and RBAC
Implement comprehensive secrets management infrastructure using AWS
Secrets Manager and HashiCorp Vault
Design security monitoring infrastructure with centralized logging using ELK
stack and FluentBit
Build automated vulnerability scanning infrastructure and remediation workflows
Implement database security hardening for MySQL, PostgreSQL, and Redis
clusters
Design network segmentation and micro-segmentation strategies for
containerized environments
Develop security automation tools and infrastructure for threat hunting and
incident response
Architect backup and disaster recovery infrastructure with security controls and
encryption
Build security testing infrastructure for application and infrastructure vulnerability
assessments

Who You Are

10+ years of Infrastructure Security/DevSecOps experience in enterprise
environments
Expert-level Terraform/Terragrunt skills for secure infrastructure provisioning
Deep knowledge of AWS security services (GuardDuty, Security Hub, Config,
CloudTrai, EKS, ECR, RDS, EC2, ECS, S3l)
Proficiency in Kubernetes security architecture (Pod Security Standards, Network
Policies, RBAC)
Hands-on experience with infrastructure vulnerability scanning and hardening
Expertise in network security architecture and Zero Trust implementation
Strong knowledge of container security and image scanning infrastructure
Experience with SIEM/SOAR infrastructure design and implementation
Understanding of PKI infrastructure and certificate management at scale
Knowledge of database security architecture and encryption strategies
Experience with infrastructure compliance automation and policy as code
Proficiency in security automation scripting (Python, Go, Bash)
Ability to design secure CI/CD infrastructure and supply chain security
Strong infrastructure troubleshooting and security incident response skills

Preferred Qualifications:

Security certifications (CISSP, CCSP, AWS Security Specialty, AWS Solution Architect, AWS DevOps Professional)
Knowledge of service mesh security architecture (Istio, Linkerd)
Familiarity with infrastructure security scanning tools
Experience with security orchestration and automated remediation platforms
Understanding of threat modeling and security architecture review processes
Knowledge of infrastructure penetration testing and red team exercises
Experience with security metrics and KPI infrastructure for executive reporting

Why Join Us

Awarded Best Managed Company of Switzerlandby Deloitte in 2024 and 2025
Bi-Annual Company Wide Trips (2023 Armenia 2025 Switzerland and more to come!)
Fully Remote Work from either Germany, UK or France
High Flexibility
Employee-Focused Culture
Innovative and Collaborative Team
Great Working Conditions

Originally posted on Himalayas