System Engineer / DevSecOps – Senior
TypeFull-time job
LocationPoland
Posted2 hours ago
Overview:
Infrastructure engineering with security embedded across the entire technology stack, including CI/CD, Kubernetes, cloud environments, secrets management, and access control.
Key responsibilities:
CoreResponsibilities
Integrate security checks into CI/CD pipelines, including dependency, container image, Infrastructure as Code (IaC), and secret scanning
Harden servers, Kubernetes clusters, and cloud environments in accordance with CIS benchmarks
Manage secrets, certificates, and the PKI lifecycle using Vault
Manage access control (SSO, IAM, least privilege) and conduct regular access reviews
Track and remediate vulnerabilities, coordinating patching activities across development and infrastructure teams
Support security incident investigations, incident response, audits, and compliance activities
Enforce Kubernetes runtime and policy security, including RBAC, network policies, Pod Security Standards (PSS), and Kyverno/OPA
InfrastructureResponsibilities
Set up and maintain production and staging infrastructure, including updates and incident resolution
Improve infrastructure setup and maintenance processes
Support and develop GitLab CI pipelines
Contribute to the design of complex IT systems
Collaborate with product development teams and stakeholders
Handle monitoring events, including periodic day and night on-call duties
Required Experience:
3+years of experience as a System Engineer, SRE, or DevOps Engineer
Solid Linux administration and troubleshooting skills
Experience with configuration management tools such as Ansible, SaltStack, Terraform, or Pulumi
Experience with Kubernetes and Helm
Experience configuring GitLab CI/CD pipelines
Experience with Anti-DDoS solutions, WAF, and WAAP (Cloudflare, Fastly, Akamai, etc.)
Experience with monitoring tools (Prometheus stack, Zabbix)
Strong understanding of information security fundamentals, including least privilege, defense in depth, network security, and TLS/PKI
Experience with secrets management solutions such as HashiCorp Vault or similar
Strong problem-solving skills
Higher technical education
English level B1+ and strong command of Russian
Our Benefits:
Private health insurance
Sports benefits
Comprehensive Mental Health Program
Free English lessons (online)
Local language courses
Paid time off
Maternity leave support
Referral program rewards
Upskilling, internal workshops, and participation in professional conferences and corporate events
Originally posted on Himalayas
Infrastructure engineering with security embedded across the entire technology stack, including CI/CD, Kubernetes, cloud environments, secrets management, and access control.
Key responsibilities:
CoreResponsibilities
Integrate security checks into CI/CD pipelines, including dependency, container image, Infrastructure as Code (IaC), and secret scanning
Harden servers, Kubernetes clusters, and cloud environments in accordance with CIS benchmarks
Manage secrets, certificates, and the PKI lifecycle using Vault
Manage access control (SSO, IAM, least privilege) and conduct regular access reviews
Track and remediate vulnerabilities, coordinating patching activities across development and infrastructure teams
Support security incident investigations, incident response, audits, and compliance activities
Enforce Kubernetes runtime and policy security, including RBAC, network policies, Pod Security Standards (PSS), and Kyverno/OPA
InfrastructureResponsibilities
Set up and maintain production and staging infrastructure, including updates and incident resolution
Improve infrastructure setup and maintenance processes
Support and develop GitLab CI pipelines
Contribute to the design of complex IT systems
Collaborate with product development teams and stakeholders
Handle monitoring events, including periodic day and night on-call duties
Required Experience:
3+years of experience as a System Engineer, SRE, or DevOps Engineer
Solid Linux administration and troubleshooting skills
Experience with configuration management tools such as Ansible, SaltStack, Terraform, or Pulumi
Experience with Kubernetes and Helm
Experience configuring GitLab CI/CD pipelines
Experience with Anti-DDoS solutions, WAF, and WAAP (Cloudflare, Fastly, Akamai, etc.)
Experience with monitoring tools (Prometheus stack, Zabbix)
Strong understanding of information security fundamentals, including least privilege, defense in depth, network security, and TLS/PKI
Experience with secrets management solutions such as HashiCorp Vault or similar
Strong problem-solving skills
Higher technical education
English level B1+ and strong command of Russian
Our Benefits:
Private health insurance
Sports benefits
Comprehensive Mental Health Program
Free English lessons (online)
Local language courses
Paid time off
Maternity leave support
Referral program rewards
Upskilling, internal workshops, and participation in professional conferences and corporate events
Originally posted on Himalayas
Apply on Himalayas →
Job sourced from Himalayas. Applications happen directly on the original platform — we never collect your data.