DevOps Engineer

Pracovní nabídka

🚀 DevOps Engineer – Security (Mid & Senior)

📍 Czech Republic / Slovakia | Hybrid / Remote | Full-time (HPP)

🚀 What You’ll Do

Security & DevOps Engineering

• Embed security across the entire DevOps lifecycle, ensuring secure-by-design cloud-native platforms and services
• Design and implement security controls for Kubernetes, CI/CD pipelines, and cloud infrastructure
• Enforce secure configuration management, RBAC, secrets handling, and network policies
• Build and maintain secure, scalable CI/CD pipelines with integrated security testing (SAST, DAST, dependency scanning)

Cloud Platform & Reliability

• Develop and maintain cloud platforms using Infrastructure-as-Code (Terraform, Helm, etc.)
• Contribute to Site Reliability Engineering (SRE) through automation, performance optimization, and reliability improvements
• Manage lifecycle processes including releases, upgrades, and change management

Security Operations & Compliance

• Drive vulnerability management, threat modeling, and incident response
• Monitor and respond to threats using SIEM and observability tools (Prometheus, Grafana, ELK, Splunk)
• Ensure compliance with internal policies and frameworks (e.g., ISO 27001, GDPR, SOC 2)
• Conduct security assessments, audits, and penetration testing

Collaboration & Leadership

• Collaborate with cross-functional teams to define security standards and guardrails
• Mentor engineers on DevSecOps practices and secure coding (Senior level)
• Communicate effectively with stakeholders up to management level
• Participate in on-call rotation (stand-by support)

✅ What We’re Looking For

Qualifications

• Fluent in English
• Mid-level: 2+ years of cloud experience
• Senior-level: 5+ years in DevOps / platform engineering with cloud-native environments

🛠️ Technical Skills

Core Requirements

• Strong knowledge of cloud-native security principles and practices
• Experience with Linux environments and shell/Bash scripting
• Hands-on experience with Kubernetes and cloud platforms (OpenStack or public cloud)
• CI/CD pipeline development using GitOps workflows
• Understanding of: Identity & Access Management (IAM), Encryption, logging, monitoring, Vulnerability management & incident response, Web Application Firewalls (WAF) & certificate management

Advanced / Senior Expertise

• Deep Kubernetes security (RBAC, network policies, secrets, Pod Security Standards)
• Security automation with Python, Go, Bash
• IaC security and policy enforcement (Terraform, OPA/Gatekeeper, Kyverno)
• SIEM & observability tools for threat detection and incident response

⭐ Nice to Have

• Experience developing APIs or Kubernetes operators
• Knowledge of compliance frameworks (ISO 27001, GDPR, SOC 2)
• Contributions to open-source security projects
• Certifications such as CKS, CISSP, OSCP, AWS Security Specialty