DevSecOps Engineer

NestAI; Helsinki; On-site; EUR 85,000 - 120,000; Full time

Benefits offered by this job

Occupational healthcare

Epassi Flex benefit

Lunch benefit

Auntie

Regular team lunches

Mac or PC of your choice

Holiday allowance

Phone benefit

Job summary

NestAI, a European AI lab for defence, seeks a (Senior) DevSecOps Engineer to strengthen the Core Engineering team and secure the NestOS platform. You’ll design scalable cloud environments, automate security testing, and manage container workloads with Kubernetes while embedding security into CI/CD.

You’ll collaborate across development and security teams, ensure strict access controls, and support on-premises, hybrid, and cloud deployments with a security-first mindset.

Qualifications

• Hands-on experience with cloud platforms (AWS/Azure/GCP), IaC (Terraform), Docker, Kubernetes, and GitOps delivery (ArgoCD/Flux, Helm, Kustomize).
• Proven track record designing CI/CD pipelines (GitHub Actions, GitLab CI, Azure DevOps, Jenkins) with integrated security tooling (SAST, DAST, SCA, IaC scanning).
• Solid foundation in secrets management, IAM, OIDC, and experience working with at least one compliance framework (SOC 2, ISO 27001, PCI-DSS, or HIPAA).
• Proficient in Python, Go, or Bash, with a proactive, shift-left mindset and strong communication skills to bridge developer velocity and strict security.
• Experience with air-gapped, hybrid/on-premise, or multi-tenant deployments and software supply chain security (SBOM, Cosign, SLSA/SSDF).
• Professional working proficiency in English. Strong Finnish language skills are considered as an advantage.
• Familiarity with defence/regulatory security standards (STIG, CIS, NIS2), policy-as-code (OPA/Gatekeeper), or Keycloak/identity administration is considered as an advantage.

Responsibilities

• Design, build, and maintain scalable cloud environments (AWS, Azure, or GCP) using Terraform and modern IaC practices.
• Implement automated security testing (SAST, DAST, SCA, IaC scanning) and robust GitOps workflows directly into CI/CD pipelines.
• Manage, secure, and optimize containerized workloads operating on Kubernetes using Helm, Kustomize, and ArgoCD or Flux.
• Own secrets management, IAM, and OIDC configurations to enforce strict zero-trust access controls across development and production environments.
• Operate between development and security teams, advocating for security best practices without creating engineering friction.

Skills

Cloud platforms

IaC (Terraform)

Docker

Kubernetes

GitOps

CI/CD pipelines

Security testing

Secrets management

Python/Go/Bash

Zero-trust / IAM / OIDC

Tools

Terraform

ArgoCD/Flux

Helm

Kustomize

GitHub Actions

GitLab CI

Azure DevOps

Jenkins

Job description

Company

NestAI is a European AI lab for defence delivering the adaptive operating system for modern battlefield operations. We develop adaptive intelligence for unmanned and command systems: AI that continuously learns from operational data and adapts to changing conditions.

Company

NestAI is a European AI lab for defence delivering the adaptive operating system for modern battlefield operations. We develop adaptive intelligence for unmanned and command systems: AI that continuously learns from operational data and adapts to changing conditions.
NestOS is our open, modular, and interoperable platform that enables this at scale and keeps capability evolution under sovereign European control. Founded in 2025 by Peter Sarlin, whose previous company Silo AI became Europe's largest AI acquisition, NestAI brings together over 150 engineers and scientists and partners with leading European defence forces and industry.

Role Description

We are looking for a (Senior) DevSecOps Engineer to strengthen our Core Engineering team. In this role, you will focus on building, automating, and securing the foundation of our NestOS platform. You will ensure that our deployment pipelines, container orchestration, and cloud infrastructure maintain the highest security standards without sacrificing delivery velocity.

We are looking for a proactive, self-driven problem solver with an infrastructure-first mindset who naturally integrates security practices into daily engineering operations. Your work directly enables secure deployments across cloud, hybrid, and sovereign on-premise environments.

Day-to-day Responsibilities Include

• Design, build, and maintain scalable cloud environments (AWS, Azure, or GCP) using Terraform and modern IaC practices.
• Implement automated security testing (SAST, DAST, SCA, IaC scanning) and robust GitOps workflows directly into CI/CD pipelines.
• Manage, secure, and optimize containerized workloads operating on Kubernetes using Helm, Kustomize, and ArgoCD or Flux.
• Own secrets management, IAM, and OIDC configurations to enforce strict zero-trust access controls across development and production environments.
• Operate between development and security teams, advocating for security best practices without creating engineering friction.

Qualifications

• Hands-on experience with cloud platforms (AWS/Azure/GCP), IaC (Terraform), Docker, Kubernetes, and GitOps delivery (ArgoCD/Flux, Helm, Kustomize).
• Proven track record designing CI/CD pipelines (GitHub Actions, GitLab CI, Azure DevOps, Jenkins) with integrated security tooling (SAST, DAST, SCA, IaC scanning).
• Solid foundation in secrets management, IAM, OIDC, and experience working with at least one compliance framework (SOC 2, ISO 27001, PCI-DSS, or HIPAA).
• Proficient in Python, Go, or Bash, with a proactive, shift-left mindset and strong communication skills to bridge developer velocity and strict security.
• Experience with air-gapped, hybrid/on-premise, or multi-tenant deployments and software supply chain security (SBOM, Cosign, SLSA/SSDF).
• Professional working proficiency in English. Strong Finnish language skills are considered as an advantage.
• Familiarity with defence/regulatory security standards (STIG, CIS, NIS2), policy-as-code (OPA/Gatekeeper), or Keycloak/identity administration is considered as an advantage.

Why join NestAI

At NestAI, you’ll build meaningful, real-world technology as part of a world-class team of engineers, scientists, and experienced professionals. You’ll work on systems where reliability genuinely matters, contribute to Europe’s security and resilience, and solve problems that demand depth, trust, and craftsmanship.

If you want to build with purpose — and with leading experts in the field — you’ve come to the right place.

Perks & Benefits

We offer a growing set of practical benefits to support your work and wellbeing, day to day:

• Occupational healthcare (currently provided by Mehiläinen)
• Epassi Flex benefit (sports, culture, commuting, wellbeing)
• Lunch benefit (25% tax-free coverage)
• Auntie (mental wellbeing services)
• Regular team lunches and all-hands events
• Your choice of Mac or PC
• Holiday allowance (50% of holiday salary)
• Phone benefit according to company policy (subscription and device)

We are continuously developing and expanding our benefits as we grow.

Practicalities

Employment is subject to applicable security screening (including SUPO, where required).
NestAI is an equal opportunity employer. We consider all applicants based on their skills, experience, and potential.
We are currently unable to provide visa sponsorship or international relocation support for this position. Candidates must already be based in Finland or in the EU and have a valid work permit for this region at the time of application.