DevSecOps Engineer: Secure Cloud Pipelines & Kubernetes

NestAI; Helsinki; On-site; EUR 85,000 - 120,000; Full time

Benefits offered by this job

Occupational healthcare

Epassi Flex benefit

Lunch benefit

Auntie

Regular team lunches

Mac or PC of your choice

Holiday allowance

Phone benefit

Job summary

NestAI, a European AI lab for defence, seeks a (Senior) DevSecOps Engineer to strengthen the Core Engineering team and secure the NestOS platform. You’ll design scalable cloud environments, automate security testing, and manage container workloads with Kubernetes while embedding security into CI/CD.

You’ll collaborate across development and security teams, ensure strict access controls, and support on-premises, hybrid, and cloud deployments with a security-first mindset.

Qualifications

• Hands-on experience with cloud platforms (AWS/Azure/GCP), IaC (Terraform), Docker, Kubernetes, and GitOps delivery (ArgoCD/Flux, Helm, Kustomize).
• Proven track record designing CI/CD pipelines (GitHub Actions, GitLab CI, Azure DevOps, Jenkins) with integrated security tooling (SAST, DAST, SCA, IaC scanning).
• Solid foundation in secrets management, IAM, OIDC, and experience working with at least one compliance framework (SOC 2, ISO 27001, PCI-DSS, or HIPAA).
• Proficient in Python, Go, or Bash, with a proactive, shift-left mindset and strong communication skills to bridge developer velocity and strict security.
• Experience with air-gapped, hybrid/on-premise, or multi-tenant deployments and software supply chain security (SBOM, Cosign, SLSA/SSDF).
• Professional working proficiency in English. Strong Finnish language skills are considered as an advantage.
• Familiarity with defence/regulatory security standards (STIG, CIS, NIS2), policy-as-code (OPA/Gatekeeper), or Keycloak/identity administration is considered as an advantage.

Responsibilities

• Design, build, and maintain scalable cloud environments (AWS, Azure, or GCP) using Terraform and modern IaC practices.
• Implement automated security testing (SAST, DAST, SCA, IaC scanning) and robust GitOps workflows directly into CI/CD pipelines.
• Manage, secure, and optimize containerized workloads operating on Kubernetes using Helm, Kustomize, and ArgoCD or Flux.
• Own secrets management, IAM, and OIDC configurations to enforce strict zero-trust access controls across development and production environments.
• Operate between development and security teams, advocating for security best practices without creating engineering friction.

Skills

Cloud platforms

IaC (Terraform)

Docker

Kubernetes

GitOps

CI/CD pipelines

Security testing

Secrets management

Python/Go/Bash

Zero-trust / IAM / OIDC

Tools

Terraform

ArgoCD/Flux

Helm

Kustomize

GitHub Actions

GitLab CI

Azure DevOps

Jenkins

Job description

NestAI, a European AI lab for defence, seeks a (Senior) DevSecOps Engineer to strengthen the Core Engineering team and secure the NestOS platform. You’ll design scalable cloud environments, automate security testing, and manage container workloads with Kubernetes while embedding security into CI/CD.

You’ll collaborate across development and security teams, ensure strict access controls, and support on-premises, hybrid, and cloud deployments with a security-first mindset.