Cloud DevSecOps Engineer (AWS & Azure)

Capco Poland; Deutschland; Vor Ort; EUR 70.000 - 110.000; Vollzeit

Zusammenfassung

Capco Poland is seeking a security-first Cloud DevSecOps Engineer to design, automate, and safeguard our multi-cloud infrastructure across AWS and Azure. You’ll bake security into pipelines and partner with development teams to enforce a Shift Left culture.

In this role you’ll drive infrastructure as code, container security, and continuous compliance, implementing IAM, secrets management, and automated vulnerability scanning to keep apps safe at scale.

Qualifikationen

• 3+ years in a cloud operations or infrastructure role managing production environments in AWS and Azure.
• Hands-on with Terraform, Docker, Kubernetes, and scripting (Python/Bash/PowerShell).
• Strong security mindset with cloud network security and vulnerability management.
• Experience integrating security into CI/CD pipelines and automated testing (SAST/DAST).
• Nice-to-have AWS/Azure certifications or CKS.

Aufgaben

• Multi-Cloud Automation: Build and manage infrastructure across AWS and Azure using Terraform.
• Pipeline Hardening: Design and secure CI/CD pipelines with vulnerability scanning and container scanning.
• Identity & Secrets Access: Enforce zero-trust IAM, RBAC, and secure secrets management (Vault, Key Vault).
• Container Security: Deploy, manage, and harden Kubernetes workloads (EKS/AKS).
• Compliance & Monitoring: Audit cloud posture using AWS Security Hub and Azure Defender.

Kenntnisse

Cloud & DevSecOps

Terraform

Docker

Kubernetes

Scripting (Python/Bash/PowerShell)

Security mindset

Tools

GitHub Actions

Azure DevOps

GitLab

HashiCorp Vault

Azure Key Vault

Jobbeschreibung

*We are looking for Poland based candidate.

AtCapco Poland,we’re not just another consultancy - we’re the spark behind digital transformation in the financial world. As a global leader in technology and management consulting, we thrive on helping clients tackle the toughest challenges across banking, payments, capital markets, wealth, and asset management.

Role Overview

We are looking for a security-firstCloud DevSecOps Engineerto design, automate, and protect our multi-cloud infrastructure acrossAWS and Azure. In this role, you won't just build pipelines, you will bake security directly into them. You will work closely with our development and engineering teams to enforce a "Shift Left" culture, ensuring that automation, scalability, and airtight cloud compliance go hand-in-hand.

Core Responsibilities

• Multi-Cloud Automation:Build and manage highly available infrastructure across AWS and Azure using Infrastructure as Code (Terraform).
• Pipeline Hardening:Design and secure CI/CD pipelines (GitHub Actions, Azure DevOps, or GitLab), embedding automated vulnerability scanning,SAST/DAST, and container scanning tools.
• Identity & Secrets Access:Enforce zero-trust architecture across both platforms via robust IAM strategy, RBAC, and secure secrets management (HashiCorp Vault, Azure Key Vault).
• Container Security:Deploy, manage, and harden containerized workloads running inKubernetes (EKS & AKS).
• Compliance & Monitoring:Continuously audit cloud posture using AWS Security Hub and Azure Defender to ensure alignment with frameworks like SOC2, ISO 27001, or CIS benchmarks.

Key Qualifications

• Experience:3+ years in a cloud operations or infrastructure role managing production environments in bothAWSandAzure.
• Tools:Deep familiarity withTerraform, Docker, Kubernetes, and scripting languages (Python, Bash, or PowerShell).
• Security Mindset:Practical knowledge of cloud network security, data encryption, and vulnerability management.
• Certifications (nice to have):AWS Certified Security/DevOps Professional, Azure Security Engineer (AZ-500), or CKS (Certified Kubernetes Security Specialist).

We offer a flexible collaboration model based on a B2B contract, with the opportunity to work on diverse projects.

Recruitment Process

• HR Interview with the recruiter
• Technical Interview
• Client Interview
• Feedback and offer

#LI-HYBRID