DevSecOps Engineer

NestAI; Jyväskylä; On-site; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Occupational healthcare

Epassi Flex

Lunch benefit

Auntie

Team lunches

Mac or PC

Holiday allowance

Phone benefit

Job summary

NestAI in Finland is seeking a Senior DevSecOps Engineer to strengthen the Core Engineering team. You will build, automate, and secure the NestOS platform, ensuring cloud, hybrid, and sovereign on-premise deployments meet the highest security standards.

You’ll design scalable cloud environments, implement automated security testing, and manage Kubernetes workloads with ArgoCD/Flux, Helm, and Kustomize, while collaborating with security and development teams.

Qualifications

• Cloud platforms (AWS/Azure/GCP) and IaC with Terraform.
• CI/CD pipelines with integrated security tooling (SAST/DAST/SCA/Bom).
• Secrets management, IAM, OIDC, and zero-trust concepts.
• Proficient in Python/Go/Bash and cross-team communication.
• Experience with air-gapped, hybrid/on-premise deployments.
• Knowledge of defence/regulatory security standards (STIG/NIS2) is a plus.

Responsibilities

• Design, build, and maintain scalable cloud environments with Terraform.
• Implement automated security testing and secure CI/CD workflows.
• Manage Kubernetes workloads using Helm, Kustomize, and ArgoCD/Flux.
• Own secrets management, IAM, and OIDC configurations.
• Collaborate with development and security teams to reduce friction.

Skills

Cloud platforms

Terraform

Docker

Kubernetes

GitOps

CI/CD pipelines

Security tooling

SAST/DAST/SCA

IAM/OIDC

Scripting (Python/Go/Bash)

SBOM / software supply chain

Compliance familiarity

English proficient

Finnish advantage

Tools

ArgoCD

Flux

Helm

Kustomize

Terraform

GitHub Actions

GitLab CI

Azure DevOps

Jenkins

Cosign

OPA/Gatekeeper

Keycloak

Job description

Company

NestAI is a European AI lab for defence delivering the adaptive operating system for modern battlefield operations. We develop adaptive intelligence for unmanned and command systems: AI that continuously learns from operational data and adapts to changing conditions. NestOS is our open, modular, and interoperable platform that enables this at scale and keeps capability evolution under sovereign European control. Founded in 2025 by Peter Sarlin, whose previous company Silo AI became Europe’s largest AI acquisition, NestAI brings together over 150 engineers and scientists and partners with leading European defence forces and industry.

Role Description

We are looking for a (Senior) DevSecOps Engineer to strengthen our Core Engineering team. In this role, you will focus on building, automating, and securing the foundation of our NestOS platform. You will ensure that our deployment pipelines, container orchestration, and cloud infrastructure maintain the highest security standards without sacrificing delivery velocity.

We are looking for a proactive, self-driven problem solver with an infrastructure-first mindset who naturally integrates security practices into daily engineering operations. Your work directly enables secure deployments across cloud, hybrid, and sovereign on-premise environments.

Day-to-day Responsibilities Include

• Design, build, and maintain scalable cloud environments (AWS, Azure, or GCP) using Terraform and modern IaC practices.
• Implement automated security testing (SAST, DAST, SCA, IaC scanning) and robust GitOps workflows directly into CI/CD pipelines.
• Manage, secure, and optimize containerized workloads operating on Kubernetes using Helm, Kustomize, and ArgoCD or Flux.
• Own secrets management, IAM, and OIDC configurations to enforce strict zero-trust access controls across development and production environments.
• Operate between development and security teams, advocating for security best practices without creating engineering friction.

Qualifications

• Hands-on experience with cloud platforms (AWS/Azure/GCP), IaC (Terraform), Docker, Kubernetes, and GitOps delivery (ArgoCD/Flux, Helm, Kustomize).
• Proven track record designing CI/CD pipelines (GitHub Actions, GitLab CI, Azure DevOps, Jenkins) with integrated security tooling (SAST, DAST, SCA, IaC scanning).
• Solid foundation in secrets management, IAM, OIDC, and experience working with at least one compliance framework (SOC 2, ISO 27001, PCI-DSS, or HIPAA).
• Proficient in Python, Go, or Bash, with a proactive, shift-left mindset and strong communication skills to bridge developer velocity and strict security.
• Experience with air-gapped, hybrid/on-premise, or multi-tenant deployments and software supply chain security (SBOM, Cosign, SLSA/SSDF).
• Professional working proficiency in English. Strong Finnish language skills are considered as an advantage.
• Familiarity with defence/regulatory security standards (STIG, CIS, NIS2), policy-as-code (OPA/Gatekeeper), or Keycloak/identity administration is considered as an advantage.

Why join NestAI

At NestAI, you’ll build meaningful, real-world technology as part of a world-class team of engineers, scientists, and experienced professionals. You’ll work on systems where reliability genuinely matters, contribute to Europe’s security and resilience, and solve problems that demand depth, trust, and craftsmanship.

If you want to build with purpose — and with leading experts in the field — you’ve come to the right place.

Perks & Benefits

• Occupational healthcare (currently provided by Mehiläinen)
• Epassi Flex benefit (sports, culture, commuting, wellbeing)
• Lunch benefit (25% tax-free coverage)
• Auntie (mental wellbeing services)
• Regular team lunches and all-hands events
• Your choice of Mac or PC
• Holiday allowance (50% of holiday salary)
• Phone benefit according to company policy (subscription and device)

We are continuously developing and expanding our benefits as we grow.

Practicalities

Employment is subject to applicable security screening (including SUPO, where required).

NestAI is an equal opportunity employer. We consider all applicants based on their skills, experience, and potential.

We are currently unable to provide visa sponsorship or international relocation support for this position. Candidates must already be based in Finland or in the EU and have a valid work permit for this region at the time of application.