DevOps Engineer

Lepaya; Amsterdam; Hybrid; EUR 70,000 - 100,000; Full time

Benefits offered by this job

Unlimited holidays

Lepaya Fridays

Hybrid working arrangement (office at

Flexible hours

Work from anywhere 8 weeks/year

Wellbeing partner

Internal career development

Lepaya Academy

Internal hiring program

Job summary

Lepaya, Amsterdam-based learning platform, is seeking a DevSecOps Engineer to join the security-forward DevOps team. You will help build and secure the cloud platform that powers Lepaya's global learning experiences.

You'll collaborate with security, IT, and product teams to automate guardrails, implement policy-as-code, and strengthen multi-account AWS security, while enabling fast, secure feature delivery.

Qualifications

• 4+ years in a DevOps/Platform/Security Engineering role in a fast-paced start-up or scale-up environment.
• Hands-on experience working with AWS and Terraform.
• Familiarity with CI/CD pipelines using GitHub Actions or similar tools.
• Experience working with Docker and cloud native orchestration services.
• A solid understanding of cloud security fundamentals such as IAM, hardening, encryption, network security, and secrets management
• Hands‑on experience with at least one area of security automation - vulnerability scanning, code security analysis (SAST/SCA), policy-as-code, or cloud security posture management - and the appetite to grow into the rest.

Responsibilities

• Build and secure AWS infrastructure with Terraform and least-privilege IAM.
• Embed security into CI/CD pipelines with scans and actionable results.
• Introduce policy-as-code to catch misconfigurations before merge.
• Develop secure-by-default infrastructure modules for easy, secure service launches.
• Strengthen cloud security posture across a multi-account AWS organization.
• Automate compliance and support security audits.
• Improve monitoring and observability with Grafana Cloud and OpenTelemetry.
• Find opportunities to automate repetitive processes and improve developer experience.

Skills

AWS

Terraform

CI/CD (GitHub Actions)

Docker

OpenTelemetry

Grafana

Security automation

Bash

Python

TypeScript

Tools

Terraform

AWS

GitHub Actions

Docker

OpenTelemetry

Grafana

Trivy/Grype/Snyk

GuardDuty

Job description

At Lepaya, we believe that people are every organisation's greatest asset. Our mission is to help professionals develop the skills they need to thrive, and technology enables us to deliver that learning experience to thousands of learners around the world.

As a DevSecOps Engineer, you'll work closely with Yusuf, our Senior DevOps Engineer, and help build and secure the cloud platform that makes this possible. You'll ensure our products are secure, reliable, and scalable, while giving our Tech and Product teams the tools they need to deliver new features quickly and confidently.

You'll sit at the intersection of DevOps, Security, and IT. Working closely with our Security Engineer, IT Manager, Software Engineers, and Product teams, you'll turn security policies into automated guardrails, built into the same pipelines, infrastructure modules, and developer experience that power our learning platform. For us, security isn't a gate at the end of the process; it's a feature of the platform itself.

We are not able to provide relocation support for this role. We are only hiring for candidates who are able to work in the Netherlands.

What you’ll do

• Building and improving our AWS infrastructure using Terraform, with security designed in from the start: least-privilege IAM, encryption, and network controls as defaults, not afterthoughts.
• Embedding security into our CI/CD pipeline: dependency, container, and secrets scanning in every pipeline, and making the results actionable for engineers instead of noisy.
• Introducing policy-as-code (e.g. Checkov, OPA) so infrastructure misconfigurations are caught before they're merged, not after they're deployed.
• Developing secure-by-default infrastructure modules that enable engineering teams to launch new, secure services with ease.
• Strengthening our cloud security posture across a multi-account AWS organization: identity management, threat detection, and vulnerability management as an ongoing program.
• Automating compliance: working with our Security Engineer and IT Manager to turn security controls into automatically collected, audit-ready evidence, and supporting security audits.
• Improving monitoring and observability using Grafana Cloud and OpenTelemetry, including security signals and alerting.
• Finding opportunities to automate repetitive processes and continuously improve the developer experience.

This role offers plenty of ownership while giving you the opportunity to learn, grow, and help shape the platform that powers Lepaya's mission to transform workplace learning.

What you’ll bring

• Minimum 4 years of experience in a DevOps, Platform, Cloud, or Security Engineering role in a fast-paced start-up or scale-up environment.
• Hands-on experience working with AWS and Terraform.
• Familiarity with CI/CD pipelines using GitHub Actions or similar tools.
• Experience working with Docker and cloud native orchestration services.
• A solid understanding of cloud security fundamentals such as IAM, hardening, encryption, network security, and secrets management
• Hands‑on experience with at least one area of security automation - vulnerability scanning, code security analysis (SAST/SCA), policy-as-code, or cloud security posture management - and the appetite to grow into the rest.
• Scripting skills in Bash or Python. Experience with TypeScript is a plus.

Nice to have

• Experience with tech compliance (ISO 27001, SOC 2, GDPR).
• Exposure to DAST tooling (e.g. OWASP ZAP) or offensive security basics.
• Experience with software supply chain security.
• Exposure to GCP alongside AWS.
• Cloud: AWS (primary, multi-account Organizations), GCP
• IaC: Terraform (tflint, terraform-docs, pre-commit), Packer
• Compute: ECS on Fargate, Lambda, ECR
• CI/CD: GitHub Actions with centralized reusable workflows, GitHub OIDC, self-hosted runners on AWS, Dependabot
• Security: IAM Identity Center, GuardDuty, KMS, WAFv2, SSM Parameter Store, Trivy/Grype/Snyk, SonarQube
• Observability: Grafana Cloud, Loki, OpenTelemetry, CloudWatch, Sentry, Slack alerting
• Data & storage: Aurora/RDS PostgreSQL, DynamoDB, S3, Airflow (MWAA)
• AI & ML: Amazon SageMaker
• Networking & edge: CloudFront, ALB, Route53, VPC, nginx, OpenVPN/SSM Session Manager

Why you’ll love this journey at Lepaya

• A challenging role in a vibrant international scale-up
• Our work-to-live scheme, which prioritizes health and wellbeing
• Unlimited holidays and Lepaya Fridays, every other Friday, a day for yourself
• Flexible hours and a hybrid working arrangement, we expect you to work from our office at least 3 days a week. Tuesday and Thursday are anchor days
• Work from anywhere for 8 weeks/year
• Access to Empowr, our well‑being partner
• Lots of opportunities to learn and grow, including internal career development:
• Access to our Lepaya Academy to help you upskill
• An internal hiring program to help you advance

Our mission

At Lepaya, we empower professionals to thrive in their careers and lead happier lives, helping businesses reach new heights. Every member of our team plays a part in transforming how organizations grow and develop their talent.

Through our Portal, Academies, and App, we deliver blended training programs for every career stage, enabling learners to learn, practice, and apply new skills that truly make an impact.

Trusted by companies like KPMG, ING, Just Eat Takeaway, Bynder, Dell, Kraft Heinz, and BCG, we’ve upskilled over 26,000 learners in 2024 across 120 countries. Backed by $80M in funding, we’re on a mission to become the world’s leading upskilling platform — and we’d love you to be part of it.

What does it mean to be a Lepayaan?

We succeed together. We act and come up with solutions. We build for growth. We exceed expectations. We create meaningful impact. For a glimpse into our culture, explore our careers page.

How we live DE&I

At Lepaya, our diverse team embraces professionals of all backgrounds. We prioritize an inclusive environment where every member is valued and empowered. Your unique perspective is celebrated, ensuring you feel supported and encouraged to be yourself at work.

What’s next?

Ensuring a smooth candidate journey is our top priority. Here's a sneak peek into our standard hiring process: 1. An intro video call with Tracy, from TA, 2. An hour chat with Yusuf & Tim, the team member 3. A Technical case assignment followed by a technical interview with Yusuf and Tim at the office followed by a quick 4. Coffee chat with Max (IT) and Henrique(Eng), when all positive, a last call with Rovana, the hiring manager, and finally, an offer! We're all about getting to know you better, so we'll invite you to our office for a face‑to‑face stage, where you can meet potential future colleagues and experience our awesome office vibes firsthand!