Senior DevSecOps Engineer: Cloud Security & Automation

Forterro │ FR; Caen; Sur place; EUR 105 000 - 152 000; Plein temps

Résumé du poste

Forterro is seeking a Senior DevSecOps Engineer to bridge security tooling, platform automation and CloudOps for a multi-product AWS SaaS estate. You will own security controls, identity and access, vulnerability management and evidence reporting.

The role operates within Cloud Platform, embedded in Platform Engineering, with hands-on ownership of security tooling, CI/CD, and guardrails across environments. Remote UK-based, permanent.

Qualifications

• 5+ years in DevSecOps or security-focused cloud engineering.
• Strong AWS security knowledge across IAM, networking, logging and guardrails.
• Experience deploying security tooling and policy-as-code in IaC pipelines.
• Hands-on with Terraform or CloudFormation, GitOps and CI/CD tooling.

Responsabilités

• Design, implement and maintain AWS security controls across IAM, networking and logging.
• Automate security tooling deployment and governance across multi-product SaaS estates.
• Maintain vulnerability and patch management automation; ensure remediation work is tracked.
• Operate and improve security tooling health, coverage and evidence reporting.
• Integrate security controls into GitLab CI/CD and GitOps workflows (ArgoCD).
• Secure Kubernetes/EKS clusters, serverless workloads and runtime protections.
• Create runbooks, dashboards and reporting for compliance and risk trends.
• Mentor engineers on secure practices within Platform Engineering and CloudOps.

Connaissances

DevSecOps

Cloud Security

AWS security

Infrastructure as Code

GitOps

CI/CD

SRE/Platform Engineering

Vulnerability management

Threat remediation

Automation

RBAC

Policy as code

Outils

Terraform

CloudFormation

Ansible

Helm

GitLab CI/CD

ArgoCD

Kubernetes

AWS

CrowdStrike

Tenable

Fortinet

Cloudflare

Description du poste

Forterro is seeking a Senior DevSecOps Engineer to bridge security tooling, platform automation and CloudOps for a multi-product AWS SaaS estate. You will own security controls, identity and access, vulnerability management and evidence reporting.

The role operates within Cloud Platform, embedded in Platform Engineering, with hands-on ownership of security tooling, CI/CD, and guardrails across environments. Remote UK-based, permanent.