Senior DevSecOps Engineer: Cloud, Kubernetes & Zero‑Trust

NestAI; Jyväskylä; On-site; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Occupational healthcare

Epassi Flex

Lunch benefit

Auntie

Team lunches

Mac or PC

Holiday allowance

Phone benefit

Job summary

NestAI in Finland is seeking a Senior DevSecOps Engineer to strengthen the Core Engineering team. You will build, automate, and secure the NestOS platform, ensuring cloud, hybrid, and sovereign on-premise deployments meet the highest security standards.

You’ll design scalable cloud environments, implement automated security testing, and manage Kubernetes workloads with ArgoCD/Flux, Helm, and Kustomize, while collaborating with security and development teams.

Qualifications

• Cloud platforms (AWS/Azure/GCP) and IaC with Terraform.
• CI/CD pipelines with integrated security tooling (SAST/DAST/SCA/Bom).
• Secrets management, IAM, OIDC, and zero-trust concepts.
• Proficient in Python/Go/Bash and cross-team communication.
• Experience with air-gapped, hybrid/on-premise deployments.
• Knowledge of defence/regulatory security standards (STIG/NIS2) is a plus.

Responsibilities

• Design, build, and maintain scalable cloud environments with Terraform.
• Implement automated security testing and secure CI/CD workflows.
• Manage Kubernetes workloads using Helm, Kustomize, and ArgoCD/Flux.
• Own secrets management, IAM, and OIDC configurations.
• Collaborate with development and security teams to reduce friction.

Skills

Cloud platforms

Terraform

Docker

Kubernetes

GitOps

CI/CD pipelines

Security tooling

SAST/DAST/SCA

IAM/OIDC

Scripting (Python/Go/Bash)

SBOM / software supply chain

Compliance familiarity

English proficient

Finnish advantage

Tools

ArgoCD

Flux

Helm

Kustomize

Terraform

GitHub Actions

GitLab CI

Azure DevOps

Jenkins

Cosign

OPA/Gatekeeper

Keycloak

Job description

NestAI in Finland is seeking a Senior DevSecOps Engineer to strengthen the Core Engineering team. You will build, automate, and secure the NestOS platform, ensuring cloud, hybrid, and sovereign on-premise deployments meet the highest security standards.

You’ll design scalable cloud environments, implement automated security testing, and manage Kubernetes workloads with ArgoCD/Flux, Helm, and Kustomize, while collaborating with security and development teams.