Senior DevSecOps Engineer: Cloud, Kubernetes & Zero-Trust

NestAI; Tampere; On-site; EUR 85,000 - 120,000; Full time

Benefits offered by this job

Healthcare (Mehiläinen)

Flex benefits

Lunch benefit

Mental wellbeing services

Team events

Mac or PC equipment

Holiday allowance

Phone benefit

Job summary

NestAI is an European AI lab for defence delivering an adaptive operating system for modern battlefield operations. We hire a Senior DevSecOps Engineer to fortify our NestOS platform, automating secure, scalable deployments across cloud, hybrid, and on‑prem environments.

You’ll integrate security into daily engineering, build IAM/OIDC controls, and lead SBOM and software‑supply chain best practices with a strong emphasis on zero-trust principles.

Qualifications

• Hands-on experience with cloud platforms (AWS/Azure/GCP).
• Proven track record designing CI/CD pipelines with security tooling integrated.
• Solid foundation in secrets management, IAM, OIDC.
• Experience with air-gapped, hybrid/on-premise deployments and software supply chain security.

Responsibilities

• Design, build, and maintain scalable cloud environments (AWS, Azure, or GCP) using Terraform and IaC practices.
• Implement automated security testing (SAST, DAST, SCA, IaC scanning) and robust GitOps workflows in CI/CD pipelines.
• Manage, secure, and optimize container workloads on Kubernetes using Helm, Kustomize, and ArgoCD/Flux.
• Own secrets management, IAM, and OIDC configurations to enforce zero-trust access.
• Bridge development and security teams to minimize friction while improving security.

Skills

Cloud platforms (AWS/Azure/GCP)

Terraform

Docker

Kubernetes

GitOps (ArgoCD/Flux)

CI/CD pipelines (GitHub Actions)

Security tooling (SAST/DAST/SCA)

IAM/OIDC

SBOM / Cosign / SLSA

Python/Go/Bash

Compliance frameworks (SOC2/ISO27001/2

Security in air-gapped/on-prem/offline

English (fluent) + Finnish advantage

Policy-as-code (OPA/Gatekeeper)

Keycloak/Identity administration

Tools

ArgoCD/Flux

Helm

Kustomize

Job description

NestAI is an European AI lab for defence delivering an adaptive operating system for modern battlefield operations. We hire a Senior DevSecOps Engineer to fortify our NestOS platform, automating secure, scalable deployments across cloud, hybrid, and on‑prem environments.

You’ll integrate security into daily engineering, build IAM/OIDC controls, and lead SBOM and software‑supply chain best practices with a strong emphasis on zero-trust principles.