Senior DevSecOps Engineer: Cloud, CI/CD & Security

NestAI; Turku; On-site; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Occupational healthcare

Epassi Flex benefit

Lunch benefit

Mental wellbeing services

Regular team lunches

Mac or PC choice

Holiday allowance

Phone benefit

Job summary

Qualifications

• Hands-on experience with cloud platforms (AWS/Azure/GCP), IaC (Terraform), Docker, Kubernetes, and GitOps (ArgoCD/Flux, Helm, Kustomize).
• Proven track record designing CI/CD pipelines with integrated security tooling (SAST, DAST, SCA, IaC scanning).
• Solid foundation in secrets management, IAM, OIDC, and compliance frameworks (SOC 2, ISO 27001, PCI-DSS, or HIPAA).
• Proficiency in Python, Go, or Bash; strong communication to bridge velocity and security.
• Experience with air-gapped, hybrid/on-premise, or multi-tenant deployments and SBOM, Cosign, SLSA/SSDF.
• Professional working proficiency in English; Finnish language skills are an advantage.
• Familiarity with STIG, CIS, NIS2, policy-as-code (OPA/Gatekeeper), or Keycloak identity administration.

Responsibilities

• Design, build, and maintain scalable cloud environments (AWS, Azure, or GCP) using Terraform.
• Implement automated security testing (SAST, DAST, SCA, IaC scanning) in CI/CD pipelines.
• Manage, secure, and optimize containerized workloads on Kubernetes using Helm, Kustomize, ArgoCD or Flux.
• Own secrets management, IAM, and OIDC configurations to enforce strict zero-trust access controls.
• Bridge development and security teams to enforce security without adding friction.

Skills

Cloud platforms

IaC Terraform

Docker

Kubernetes

GitOps

ArgoCD

Helm

Kustomize

OIDC IAM

CI/CD security

SAST DAST SCA

SBOM

Cosign SLSA

SSDF

Python/Go/Bash

Security standards

Policy-as-code

Keycloak

Finnish advantage

Tools

ArgoCD

Flux

GitHub Actions

GitLab CI

Azure DevOps

Jenkins

Job description